last executing test programs: 2.18205974s ago: executing program 3 (id=768): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e2181) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 2.176541253s ago: executing program 2 (id=770): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000280)={0xc}) (async) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd40700002000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r2 = syz_io_uring_setup(0x237, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) syz_emit_ethernet(0xa2, &(0x7f0000000480)=ANY=[@ANYBLOB="e90c610faca20180c20000020800450000940000e0000011907800000000000000000002000000809078a20c000100000000afd9f03cdd991f9cabefa651c0d1892c55a780cab366aa6dd32d3586f6a22f31855c02786bef8573f8c35226d751a818856844a47c35b7eb0a77672c3b0736d1d7e0808e320486037f67a14cf373adf3c17131a7fcde543ce7666fcf24bc2817b1d65aaee350968f63729e9c3fda54c6e49ed46b9bd110dc34693cb6f18de9d55da8c75436b5c180452d9d5a04c1ad7db92aeb7d7c5cac4eca6669a76975fd82"], 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "c2feca96bafcd1d342d5ccab876dada3aafd1d8ea9fcaa4cdb926323bab82b32", "0eb9b1253700691f8cca917f3ee70357544881ec58882bcabc80d58f6b3ffbb1784cfb4f989f166ef1ffccb921c7b7dd", "2406e1621f72e1134b5def0bd3a511a573b3b2b6e86292d79087599f", {"bbe26acee821663673c27837b7e45cbd", "63a50a0b0081ab893d06d8ab5e406624"}}}}}}}, 0x0) (async) close(0x3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) (async) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) 2.17305449s ago: executing program 2 (id=771): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 2.17201631s ago: executing program 3 (id=772): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @rand_addr=0x64010102}}, 0xffff, 0x4}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x4, @private2, 0x6}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, @in={0x2, 0x4e2a, @loopback}], 0x74) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r2, 0x26}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x20000000000006) sysfs$1(0x3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="ba", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) 2.107206392s ago: executing program 2 (id=773): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) (async) r0 = gettid() (async, rerun: 32) r1 = getpid() (rerun: 32) rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f00000000c0)={0x29, 0x4, 0x4}) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) (async, rerun: 32) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (rerun: 32) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') read$watch_queue(r2, &(0x7f0000000300)=""/176, 0xb0) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x10, 0x4, 0x502, {{0x16, 0x4, 0x0, 0x15, 0x58, 0x65, 0x0, 0xc, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, {[@cipso={0x86, 0x42, 0xffffffffffffffff, [{0x1, 0xd, "82804679b778e8effb5bb6"}, {0x5, 0x4, "e792"}, {0x5, 0x5, "e7135e"}, {0x6, 0xb, "e0c6c5ee35e27cf477"}, {0x0, 0x4, "ea83"}, {0x0, 0x5, "ef2d5b"}, {0x1, 0x12, "3bc0d52d877aef9df7ed6d3f8dab7485"}]}]}}}}}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000240)={0x4, 0x8}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4102a108}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delqdisc={0x3c, 0x25, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xf}, {0xc, 0x4}, {0xd, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xa}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x20}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) 1.475988192s ago: executing program 3 (id=780): open$dir(&(0x7f0000000000)='./file0\x00', 0x8080, 0x2) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) keyctl$search(0xa, 0x0, &(0x7f000000fc00)='encrypted\x00', 0x0, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) read(r0, &(0x7f00000000c0)=""/175, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8000", 0x18, 0x0, 0xff, @rand_addr=' \x01\x00', @remote, {[@dstopts={0x6, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @generic={0x88}]}, @srh={0x32, 0x0, 0x4, 0x0, 0x0, 0x18, 0x2}]}}}}}, 0x0) 1.176183274s ago: executing program 2 (id=781): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x50, 0x101, 0x1, 0x5, 0x88001, 0x1, 0x6}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r5, 0x25, 0x2, @val=@netfilter={0x1, 0x1, 0x5, 0x1}}, 0x20) 1.080408683s ago: executing program 2 (id=782): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x1f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x3fff, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x20008080) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x48) umount2(&(0x7f0000000100)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setns(0xffffffffffffffff, 0x24020000) 1.005336243s ago: executing program 2 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000005c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000100)=[{r2, 0x440}, {r4, 0x8}], 0x2, 0x2ba) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r6) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000240)) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)={0x14, r7, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x400}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000ac0)=r8, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x7f) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014) r11 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x812d, 0x3, 0x3}, 0x2, 0x2, &(0x7f0000000540)={{0x200, 0x1ff, 0x2, 0x10}, &(0x7f0000000400)={{0x7f, 0xfffffff7, 0x0, 0x6}, &(0x7f00000003c0)={{0x8, 0xf, 0x7, 0x649}}}}, 0xfffffffb, &(0x7f0000000580)="54ab480058db38a4c58d5da0e0ae6161c734ab77e98e7128", 0x9}}) close(r0) 930.411499ms ago: executing program 3 (id=784): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000200)=0x5) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x523000, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80480, 0x24) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x28) linkat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x1000) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x1, &(0x7f0000000140)='grpquota') 929.997048ms ago: executing program 3 (id=785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0xe) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000040)='timerslack_ns\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x40000) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000100)={0x30}, 0x30) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}, 0x0, 0x2}}, 0x50}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000140)) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100)) r10 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr=0x3}}}}) 737.914533ms ago: executing program 1 (id=786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x483c, &(0x7f0000000180)={0x0, 0xef4, 0x80, 0x0, 0x30f}, &(0x7f0000000040), &(0x7f00000002c0)=0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x6fbe, 0x10100, 0x0, 0x2e0}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x81, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4007, @fd_index=0x8, 0x7, &(0x7f00000004c0)=""/115, 0x73, 0x0, 0x0, {0x0, r8}}) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e0064003300ffffffffffff0802110000005050505050505f00090000ffffffffff6300ff07000601010101010104060110010689590e02fc012a01042d1a00041602000000728500007b00470011000000010000010000017107690001ff010720"], 0x84}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) (async) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)) (async) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000000c0)={0x5, 0x4000, 0x8000007, 0x11, 0xfb, 0x0}) (async) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200001b) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mprotect(&(0x7f00009a8000/0x1000)=nil, 0x1000, 0x1000000) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000800)={r13, r12}, 0xc) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) (async) r14 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r14, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x40000071, 0x0, 0x7}]}) 737.442448ms ago: executing program 1 (id=787): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000100)="a89205b7e19a3ce8449f796f3df45ecb0a40eace8892ea44e511e65d31f562f5b57976d3baa2dcc7477367df233a89a7ad9d52f5c076b825ebcbaefbdbca33edc3005448585064b719fb266616c8c36c92bf7aad75aabab8b145d024e2fe74cfd56efa6bcb7b8970ae1052819b3802ea689f9435c2af88d1a698f2d915b8a717484f9626f70b2beb6362ff7ff530b8f6177ae11a2805a982c196d3f5ad7264f83527f15bddcc37aec45119bb8cb850c7") fcntl$notify(r0, 0x402, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 737.253142ms ago: executing program 3 (id=788): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@l2, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f0000000580)=""/10, 0xa}], 0x7, &(0x7f0000000640)=""/113, 0x71}, 0x10020) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r1, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa0800098884ce222d34bf3e77840a477444ea9a8443eecee67b391b738e09fca3bdd44162aaef90d7cf83cd52d5f7691069a35a00934557ca5401747f3a898af9ece5dc38b4b8ef0f2a3c837eb427561af713c32c71791f67a8f6038156be5b41556c8bd38c9310119e2c44611e8e07b2ad"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000140)) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000700)={0x5}, 0x4) inotify_init1(0x101000) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040) 663.313866ms ago: executing program 1 (id=790): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x26, 0x10000100, 0xffffffff, 0x401, 0x0, 0x5, 0x4, 0x0, 0xb, 0xff, 0x0, 0x8000001f, 0x2, 0x47, 0x0, 0xfffffffd}}) shutdown(r0, 0x1) (async) write(r0, 0x0, 0x0) 661.874126ms ago: executing program 0 (id=791): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20000, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) (async, rerun: 32) recvmsg$can_j1939(r5, &(0x7f0000000480)={&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000200)=""/34, 0x22}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000580)=""/251, 0xfb}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000000680)=""/164, 0xa4}], 0x7, &(0x7f0000000840)=""/68, 0x44}, 0x100) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x90, 0x0, 0x0) (async, rerun: 32) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (rerun: 32) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r9, 0x0, 0x0, 0x200}]) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r11, 0x2}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) r13 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_RECONFIGURE(r13, 0x7, 0x0, 0x0, 0x0) (async) r14 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80280, 0x0) ioctl$CDROM_GET_MCN(r14, 0x5311, 0x0) 661.199254ms ago: executing program 1 (id=792): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz1\x00', {0x7ff, 0x1, 0x3cf, 0x5220}, 0x1b, [0x5, 0x1, 0xbf, 0x2, 0x81, 0x800, 0xfffffffd, 0x0, 0x5, 0x8, 0x5, 0xfffffff2, 0x9, 0x800, 0x1, 0x4012, 0x9, 0x0, 0x3, 0x8, 0x100, 0xa0000000, 0x4e20ff87, 0x1, 0x8, 0x3, 0xb7, 0x1, 0xfff, 0x2, 0xa, 0x9, 0x101, 0x2, 0x8, 0x4b9, 0xd216, 0x1, 0x0, 0x10001, 0x8, 0xfffffff7, 0x1, 0x9, 0x92b, 0x1, 0x3, 0x68e, 0x7, 0xfffffff8, 0x9, 0x1, 0x7, 0x8ed6, 0x40, 0xed96e3c, 0x2, 0x3, 0x0, 0x8, 0x5, 0xc, 0x8, 0x2], [0x6, 0x40, 0x7fffffff, 0x5, 0x9, 0x7fffffff, 0x6, 0xe, 0x200, 0x8, 0x4, 0x9, 0x5, 0x7, 0xffffba29, 0x6, 0x2, 0xffffffff, 0x6, 0x7fff, 0xc53, 0xff, 0x40, 0x1, 0x0, 0x7fffffff, 0x4, 0x7, 0x10, 0x8, 0x401, 0xa26, 0x4, 0x1cb, 0x7, 0x7ff, 0x7f, 0x0, 0x7c, 0x4, 0xf, 0x0, 0xffff, 0x3d1a, 0xffffffff, 0x6, 0x2, 0x5, 0x8, 0x8001, 0xbe8, 0x52, 0x8, 0x5, 0x18e, 0x7, 0x8, 0x83, 0x1, 0x80, 0x7, 0x5, 0x3, 0x2], [0x100, 0x3, 0x1600, 0x401, 0x9, 0x80000000, 0x4, 0x3ff, 0x7, 0x80000001, 0x8, 0x9, 0x74, 0xb, 0x8, 0x5, 0xffffffff, 0x7, 0x7, 0x9, 0xfffffff8, 0x7, 0x4, 0xe, 0x4, 0x9, 0xb1e, 0x4, 0x40fe, 0x7, 0x80000000, 0x215, 0x7ff, 0x0, 0xf2ee, 0x7fffffff, 0x0, 0x6e5d224c, 0xb07, 0x1, 0x4, 0x3, 0xfffffeff, 0x8, 0x9a, 0x3, 0xd36c, 0x3, 0x800, 0x80000001, 0x3, 0x6, 0x4, 0x5da, 0x5, 0x5, 0xa5, 0x2, 0x3, 0x8, 0x5, 0x3, 0x1, 0xaac], [0x7, 0x3, 0xe9, 0xffffffff, 0x1849fdda, 0xffff8000, 0x28, 0x5, 0x2, 0x1c0, 0x8, 0x4, 0x7fff, 0xf, 0x3, 0x8, 0x5, 0x4, 0x8, 0x9, 0x5, 0x8, 0x5, 0x8001, 0x5, 0x28000000, 0x1c000, 0x3, 0x81, 0x9, 0x400, 0x4, 0x7f, 0x2, 0x22b3, 0xffffff81, 0xd58e, 0x6, 0xd5b, 0xf08, 0x7, 0x5, 0xffffff00, 0x80000001, 0xd63d, 0x7, 0x100, 0x81, 0x80, 0xf, 0x4, 0x0, 0x1, 0xe4, 0x6, 0x400, 0x400, 0x5, 0x3, 0xfffff001, 0x1, 0x7fffffff, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x51, 0xb91, 0x7d, {0x3, 0x3}, {0x1a, 0x5}, @period={0x5c, 0x7ff, 0xffb2, 0x101, 0x7, {0x5, 0xfbff, 0x3, 0x3}, 0x4, &(0x7f0000000040)=[0xe1, 0x2, 0x8, 0x3]}}) 660.952367ms ago: executing program 1 (id=793): lsm_set_self_attr(0x66, &(0x7f0000000000)={0x67, 0x8, 0xa2, 0x82, "0eee35027b4197c6b8fc1dc8651b36e6d0bae80869c8bf4204e93946b28ea2b9815070dc02abd5c777828aeb3695230a5bd1d08df79aea531855c4af28dc33f423578474961606a7cf8ae3d1e9b208e0495e6869790067eafbd1402bf5c02d0dbe74a124d0d0996f0fe7a0e7eb356e3133652047c72f6573913f37adcb91c46d37f4"}, 0xa2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x148) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x8a, 0x1, 0x40000000, 0x10}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r8, r8, 0x0, 0x7) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="f78d9ca38fff48f3b652160985bb48c021a8f8b18ab3aa76220ec8b178ea2e5391026eb4e703e16ad327830d4bc04f00"/58, 0x3a}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007809078001809c400050207000000002202d588380003c1000000000000"], 0xfd6c) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) r10 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r10, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) 566.975369ms ago: executing program 0 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) fsmount(r2, 0x0, 0x0) fsmount(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r7, 0x25, 0x8, @val=@iter={0x0}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=@newlink={0x40, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) getpid() (async) syz_pidfd_open(r3, 0x0) (async) setns(r4, 0x24020000) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r5, 0x0) (async) setns(r6, 0x24020000) (async) fsmount(r2, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r7, 0x25, 0x8, @val=@iter={0x0}}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=@newlink={0x40, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) 481.366651ms ago: executing program 0 (id=795): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x6}}]}) lseek(0xffffffffffffffff, 0x10001, 0x0) 480.497278ms ago: executing program 1 (id=796): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000080)={0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 480.1681ms ago: executing program 0 (id=797): bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wg0\x00', 0x112}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x6, 0x5) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x83) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) setns(r3, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0xc, 0x31324d59, 0x2, @discrete={0x3, 0xd6}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x200, 0x0, 0x25dfdbfe, {{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x14, 0x6c}, @in=@empty=0x14, {0x200000000, 0x7f, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000, 0x6}, {0x0, 0x6, 0x1000, 0xfffffffffffffffd}, {}, 0x80000000, 0x0, 0xa, 0x1, 0x6, 0x58}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'gre0\x00', 0x200}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000002000000240012800b0001006272696467650000140002800800080088a8fff20500070007000000"], 0x44}}, 0x0) capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000000}) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) socket$pptp(0x18, 0x1, 0x2) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x60000) 203.289469ms ago: executing program 0 (id=798): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0xfffffffc, {0x0, 0x0, 0x74, r2, {0x1, 0x10}, {0xfff2, 0xfff6}, {0x0, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4008801}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x0, 0x6, 0x8, &(0x7f0000000000)={0x10, "e922604a455494c905fd8208ff08000000000000000000000000080800"}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xa) chdir(&(0x7f0000000100)='./file0\x00') r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_elf32(r7, 0x0, 0x58) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 0s ago: executing program 0 (id=799): name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1200) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@multicast2, @remote, r2}, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r6 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x4}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x108}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x25}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r9 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SYNC(r9, 0xffffffff80000101, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x868061, &(0x7f0000000280)={[{}]}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) kernel console output (not intermixed with test programs): 36][ T64] Bluetooth: hci0: command tx timeout [ 56.597581][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.603976][ T5944] Bluetooth: hci1: command tx timeout [ 56.641932][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.644423][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.649650][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.651836][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.658923][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.683718][ T5944] Bluetooth: hci3: command tx timeout [ 56.692292][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.702264][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.711535][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.713900][ T689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.715625][ T40] audit: type=1400 audit(1768962878.598:91): avc: denied { sys_module } for pid=5936 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.728202][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.730894][ T689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.751761][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.762411][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.765032][ T689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.778957][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.781995][ T689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.820288][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.855632][ T5936] veth0_vlan: entered promiscuous mode [ 56.866721][ T5936] veth1_vlan: entered promiscuous mode [ 56.886264][ T5936] veth0_macvtap: entered promiscuous mode [ 56.892319][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.912047][ T5936] veth1_macvtap: entered promiscuous mode [ 56.946957][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.956280][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.968196][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.979152][ T595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.983149][ T595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.986330][ T5939] veth0_vlan: entered promiscuous mode [ 56.991014][ T595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.994383][ T595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.008694][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.015572][ T5939] veth1_vlan: entered promiscuous mode [ 57.061462][ T5939] veth0_macvtap: entered promiscuous mode [ 57.066751][ T5937] veth0_vlan: entered promiscuous mode [ 57.085611][ T5939] veth1_macvtap: entered promiscuous mode [ 57.089913][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.095118][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.118353][ T5937] veth1_vlan: entered promiscuous mode [ 57.126049][ T5932] veth0_vlan: entered promiscuous mode [ 57.131068][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.134964][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.145204][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.148508][ T5932] veth1_vlan: entered promiscuous mode [ 57.157017][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.176774][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.180932][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.186148][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.188142][ T5936] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.189691][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.205591][ T5937] veth0_macvtap: entered promiscuous mode [ 57.212212][ T5937] veth1_macvtap: entered promiscuous mode [ 57.235991][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.262736][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.267893][ T5932] veth0_macvtap: entered promiscuous mode [ 57.276376][ T5932] veth1_macvtap: entered promiscuous mode [ 57.291581][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.295002][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.299869][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.303851][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.323959][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.327775][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.334175][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.340369][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.367183][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5'. [ 57.374522][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.378608][ T595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.379053][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.381660][ T595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.397016][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'. [ 57.402366][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.406128][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.417173][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.420599][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.425139][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5'. [ 57.446452][ T595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.449790][ T595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.508769][ T6029] 9p: Unknown access argument 18446744073709551615: -34 [ 57.526685][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.530172][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.549344][ T6032] slcan: can't register candev [ 57.551152][ T595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.560658][ T595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.630827][ T6043] x_tables: duplicate underflow at hook 1 [ 57.686110][ T6048] netlink: 'syz.3.10': attribute type 2 has an invalid length. [ 57.731735][ T6055] openvswitch: netlink: Key type 31 is not supported [ 57.733795][ T6050] can: request_module (can-proto-0) failed. [ 57.771062][ T6059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.776889][ T6059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=6059 comm=syz.3.14 [ 57.781007][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 57.800048][ T6061] 9p: Unknown access argument 18446744073709551615: -34 [ 57.837031][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.856878][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 57.953823][ T6068] warning: `syz.2.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.992481][ T6071] Zero length message leads to an empty skb [ 57.998849][ T6074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20'. [ 58.337335][ T6084] 9p: Unknown access argument 18446744073709551615: -34 [ 58.465500][ T6057] syz.1.13 (6057): drop_caches: 2 [ 58.673927][ T64] Bluetooth: hci1: command tx timeout [ 58.673949][ T5947] Bluetooth: hci2: command tx timeout [ 58.675289][ T5944] Bluetooth: hci0: command tx timeout [ 58.678177][ T6099] ntfs3(sr0): Primary boot signature is not NTFS. [ 58.682020][ T6099] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 58.763861][ T5947] Bluetooth: hci3: command tx timeout [ 58.978842][ T6109] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 59.187675][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 59.243774][ T6128] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 59.259649][ T6131] netlink: 'syz.1.41': attribute type 10 has an invalid length. [ 59.264816][ T6131] team0: Cannot enslave team device to itself [ 59.325839][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 59.325850][ T40] audit: type=1400 audit(1768962881.208:199): avc: denied { create } for pid=6132 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.335075][ T40] audit: type=1400 audit(1768962881.208:200): avc: denied { read } for pid=6132 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.376971][ T40] audit: type=1400 audit(1768962881.248:201): avc: denied { create } for pid=6134 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 59.385302][ T40] audit: type=1400 audit(1768962881.258:202): avc: denied { mount } for pid=6134 comm="syz.1.44" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 59.393429][ T40] audit: type=1400 audit(1768962881.268:203): avc: denied { write } for pid=6134 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 59.401603][ T40] audit: type=1400 audit(1768962881.268:204): avc: denied { write } for pid=6132 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.408811][ T40] audit: type=1400 audit(1768962881.268:205): avc: denied { mounton } for pid=6134 comm="syz.1.44" path="/13/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 59.422830][ T40] audit: type=1400 audit(1768962881.288:206): avc: denied { setattr } for pid=6132 comm="syz.2.43" name="NETLINK" dev="sockfs" ino=9853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.437423][ T40] audit: type=1400 audit(1768962881.318:207): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 59.456832][ T40] audit: type=1400 audit(1768962881.338:208): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 59.571441][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 59.617294][ T6155] fuseblk: Unknown parameter 'fowner>00000000000000000000' [ 59.620519][ T6155] overlayfs: missing 'workdir' [ 59.881873][ T6184] kvm: kvm [6183]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 60.041060][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.62'. [ 60.064898][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 60.091535][ T6207] capability: warning: `syz.0.64' uses deprecated v2 capabilities in a way that may be insecure [ 60.146637][ T6204] sysfs: Unknown parameter 'fd' [ 60.156323][ T6211] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 60.414872][ T6215] netlink: 'syz.2.68': attribute type 23 has an invalid length. [ 60.463301][ T6217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6217 comm=syz.3.67 [ 60.521409][ T6221] pvfs2: Unknown parameter '.*-\' [ 60.615032][ T6223] random: crng reseeded on system resumption [ 60.729943][ T6228] overlayfs: failed to resolve './file0': -2 [ 60.752140][ T6230] openvswitch: netlink: IP tunnel TTL not specified. [ 60.755698][ T64] Bluetooth: hci1: command tx timeout [ 60.755732][ T5944] Bluetooth: hci0: command tx timeout [ 60.759894][ T64] Bluetooth: hci2: command tx timeout [ 60.835502][ T64] Bluetooth: hci3: command tx timeout [ 61.031268][ T6247] bond1: entered promiscuous mode [ 61.034537][ T6247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.039430][ T6248] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 61.048613][ T6248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.053246][ T6248] lo: entered promiscuous mode [ 61.055164][ T6248] bond1: (slave lo): Enslaving as a backup interface with an up link [ 61.059233][ T6248] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 61.163656][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.168322][ T13] bond1: (slave lo): link status up again after 0 ms [ 61.170536][ T13] bond1: (slave lo): failed to get link speed/duplex [ 61.254503][ T6258] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 61.257146][ T6258] netlink: 'syz.3.78': attribute type 4 has an invalid length. [ 61.260368][ T6258] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 61.273978][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 61.276816][ T6147] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.294557][ T6260] xt_hashlimit: invalid interval [ 61.383303][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 61.417061][ T6265] input: syz1 as /devices/virtual/input/input5 [ 61.420659][ T6265] input: failed to attach handler leds to device input5, error: -6 [ 61.493426][ T13] bond1: (slave lo): failed to get link speed/duplex [ 61.675471][ C3] vcan0: j1939_tp_rxtimer: 0xffff888040406c00: rx timeout, send abort [ 61.680068][ C3] vcan0: j1939_tp_rxtimer: 0xffff888040406400: rx timeout, send abort [ 61.683233][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888040406c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.689456][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888040406400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.840039][ T6275] overlay: Unknown parameter 'fsname' [ 61.956500][ T6282] syz_tun: entered allmulticast mode [ 62.015227][ T6281] syz_tun: left allmulticast mode [ 62.193771][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 62.194296][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 62.427726][ T6311] __nla_validate_parse: 3 callbacks suppressed [ 62.427741][ T6311] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.97'. [ 62.434559][ T6312] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.97'. [ 62.763155][ T13] net_ratelimit: 11 callbacks suppressed [ 62.763167][ T13] bond1: (slave lo): failed to get link speed/duplex [ 62.835170][ T5947] Bluetooth: hci2: command tx timeout [ 62.835449][ T5944] Bluetooth: hci0: command tx timeout [ 62.839473][ T64] Bluetooth: hci1: command tx timeout [ 62.873233][ T6145] bond1: (slave lo): failed to get link speed/duplex [ 62.882242][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 62.983218][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 62.983525][ T6332] netlink: 152 bytes leftover after parsing attributes in process `syz.3.104'. [ 63.054682][ T6344] netlink: 830 bytes leftover after parsing attributes in process `syz.1.105'. [ 63.103210][ T6145] bond1: (slave lo): failed to get link speed/duplex [ 63.113492][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 63.116525][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.107'. [ 63.127132][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 63.127201][ T6145] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.130720][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.107'. [ 63.135293][ T6145] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.143423][ T6145] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.149569][ T6145] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.186443][ T6350] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 63.204385][ T6350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.239336][ T6349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6349 comm=syz.1.108 [ 63.243860][ T6144] bond1: (slave lo): failed to get link speed/duplex [ 63.279248][ T6360] tmpfs: Bad value for 'nr_blocks' [ 63.284569][ T6360] evm: overlay not supported [ 63.363164][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 63.473214][ T13] bond1: (slave lo): failed to get link speed/duplex [ 63.564107][ T6388] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 63.580450][ T6388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.116'. [ 63.583586][ T6144] bond1: (slave lo): failed to get link speed/duplex [ 63.656886][ T6394] max out of range [ 63.693868][ T68] bond1: (slave lo): failed to get link speed/duplex [ 63.771149][ T6399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=6399 comm=syz.2.119 [ 63.804284][ T68] bond1: (slave lo): failed to get link speed/duplex [ 63.844902][ T6401] comedi comedi3: comedi_config --init_data is deprecated [ 63.957901][ T6409] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.459435][ T6439] comedi comedi0: c6xdigio: I/O port conflict (0x8,3) [ 64.528283][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 64.528300][ T40] audit: type=1400 audit(1768962886.408:329): avc: denied { ioctl } for pid=6443 comm="syz.2.135" path="socket:[13400]" dev="sockfs" ino=13400 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.541170][ T40] audit: type=1400 audit(1768962886.408:330): avc: denied { listen } for pid=6443 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.598139][ T6449] block device autoloading is deprecated and will be removed. [ 64.602682][ T6452] capability: warning: `syz.3.138' uses 32-bit capabilities (legacy support in use) [ 64.676595][ T40] audit: type=1400 audit(1768962886.558:331): avc: denied { relabelfrom } for pid=6454 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.682947][ T40] audit: type=1400 audit(1768962886.558:332): avc: denied { relabelto } for pid=6454 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.784693][ T6462] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 64.816942][ T6462] tap0: tun_chr_ioctl cmd 1074025675 [ 64.819168][ T6462] tap0: persist enabled [ 64.821212][ T6462] tap0: tun_chr_ioctl cmd 1074025675 [ 64.823558][ T6462] tap0: persist disabled [ 64.853223][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.958537][ T40] audit: type=1400 audit(1768962886.838:333): avc: denied { execute } for pid=6464 comm="syz.2.141" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 65.017113][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 65.022118][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.026692][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.030798][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 65.037889][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 65.040910][ T10] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 65.043863][ T10] usb 8-1: Manufacturer: syz [ 65.047839][ T10] usb 8-1: config 0 descriptor?? [ 65.076347][ T40] audit: type=1400 audit(1768962886.958:334): avc: denied { create } for pid=6466 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.089697][ T40] audit: type=1400 audit(1768962886.958:335): avc: denied { write } for pid=6466 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.134675][ T40] audit: type=1400 audit(1768962887.018:336): avc: denied { bind } for pid=6468 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.134976][ T5944] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28 [ 65.180721][ T40] audit: type=1400 audit(1768962887.058:337): avc: denied { read } for pid=6472 comm="syz.2.144" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.188369][ T40] audit: type=1400 audit(1768962887.058:338): avc: denied { open } for pid=6472 comm="syz.2.144" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.216098][ T6473] NFSD: Failed to start, no listeners configured. [ 65.239035][ T6476] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 65.242137][ T6476] team0: Device ipvlan2 is already an upper device of the team interface [ 65.419274][ T6450] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 65.421970][ T6458] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 65.462718][ T10] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 65.476637][ T10] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 65.512622][ T6484] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 65.523550][ T6484] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 65.605577][ T6496] netlink: 'syz.0.149': attribute type 15 has an invalid length. [ 65.727383][ T10] usb 8-1: USB disconnect, device number 2 [ 65.801083][ T6524] bad cache= option: nonw [ 65.801083][ T6524] [ 65.803549][ T6524] CIFS: VFS: bad cache= option: nonw [ 65.805296][ T6524] CIFS mount error: No usable UNC path provided in device string! [ 65.805296][ T6524] [ 65.808544][ T6524] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 66.490270][ T6550] xt_hashlimit: size too large, truncated to 1048576 [ 66.496375][ T6552] netlink: 'syz.1.160': attribute type 2 has an invalid length. [ 66.605438][ T5944] Bluetooth: hci0: command 0x0c20 tx timeout [ 66.683925][ T6573] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 66.746659][ T6580] program syz.2.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.809131][ T6582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.822237][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.826621][ T6590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.827934][ T6582] bond2: (slave bond0): making interface the new active one [ 66.830155][ T6590] IPv6: NLM_F_CREATE should be set when creating new route [ 66.833683][ T6582] bond2: (slave bond0): Enslaving as an active interface with an up link [ 66.836359][ T6590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6590 comm=syz.0.171 [ 66.892647][ T6597] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 66.897945][ T6593] syzkaller0: entered promiscuous mode [ 66.899706][ T6593] syzkaller0: entered allmulticast mode [ 66.906619][ T6595] IPVS: stopping backup sync thread 6597 ... [ 66.916115][ T6596] comedi comedi0: Minor 4 specified more than once! [ 66.920322][ T6598] comedi comedi0: Minor 4 specified more than once! [ 67.330168][ T6618] netlink: 'syz.2.177': attribute type 58 has an invalid length. [ 67.410499][ T6623] veth3: entered promiscuous mode [ 67.412723][ T6623] veth3: entered allmulticast mode [ 67.464999][ T6624] veth3: entered promiscuous mode [ 67.466728][ T6624] veth3: entered allmulticast mode [ 67.640608][ T6626] x_tables: duplicate underflow at hook 2 [ 67.651851][ T6626] syzkaller1: entered promiscuous mode [ 67.654336][ T6626] syzkaller1: entered allmulticast mode [ 67.843494][ T1072] net_ratelimit: 32 callbacks suppressed [ 67.843507][ T1072] bond1: (slave lo): failed to get link speed/duplex [ 67.876093][ T6652] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 67.879341][ T6652] __nla_validate_parse: 14 callbacks suppressed [ 67.879355][ T6652] netlink: 2096 bytes leftover after parsing attributes in process `syz.3.189'. [ 67.891129][ T6656] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 67.893303][ T6656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 67.901126][ T6656] vhci_hcd vhci_hcd.0: Device attached [ 67.916227][ T6656] netlink: 64 bytes leftover after parsing attributes in process `syz.1.187'. [ 67.916227][ T6661] netlink: 64 bytes leftover after parsing attributes in process `syz.1.187'. [ 67.954486][ T6144] bond1: (slave lo): failed to get link speed/duplex [ 68.002552][ T6676] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 68.008599][ T6676] team0: Device ipvlan2 is already an upper device of the team interface [ 68.083387][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 68.096161][ T6658] vhci_hcd: connection closed [ 68.099205][ T6143] vhci_hcd vhci_hcd.1: stop threads [ 68.104606][ T6143] vhci_hcd vhci_hcd.1: release socket [ 68.108054][ T6143] vhci_hcd vhci_hcd.1: disconnect device [ 68.163188][ T10] usb 40-1: enqueue for inactive port 0 [ 68.193234][ T1072] bond1: (slave lo): failed to get link speed/duplex [ 68.283158][ T6025] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.303228][ T1072] bond1: (slave lo): failed to get link speed/duplex [ 68.413255][ T6144] bond1: (slave lo): failed to get link speed/duplex [ 68.435057][ T6025] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.439851][ T6025] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.444241][ T6025] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 68.448085][ T6025] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.453727][ T6025] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.457994][ T6025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.465311][ T6025] usb 8-1: config 0 descriptor?? [ 68.533219][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 68.653297][ T6144] bond1: (slave lo): failed to get link speed/duplex [ 68.663703][ T10] usb usb40-port1: attempt power cycle [ 68.673238][ T5944] Bluetooth: hci0: command 0x0c20 tx timeout [ 68.763168][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 68.799946][ T6691] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.873478][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 68.879522][ T6025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.888763][ T6025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.891255][ T6025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.898726][ T6025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.901215][ T6025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.908255][ T6025] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 68.989832][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 68.992693][ T6707] netlink: 'syz.2.205': attribute type 30 has an invalid length. [ 69.000941][ T6147] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.004047][ T6147] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.010451][ T6147] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.021201][ T6147] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.086168][ T6711] vcan0: entered allmulticast mode [ 69.089369][ T6711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=6711 comm=syz.1.206 [ 69.103815][ T6711] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.106917][ T6711] block device autoloading is deprecated and will be removed. [ 69.123131][ T61] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 69.151406][ T831] usb 8-1: USB disconnect, device number 3 [ 69.192401][ T6709] md: could not open device unknown-block(0,0). [ 69.197338][ T6709] md: md_import_device returned -6 [ 69.223711][ T10] usb usb40-port1: unable to enumerate USB device [ 69.239186][ T6716] fuse: Bad value for 'fd' [ 69.243212][ T6716] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.207'. [ 69.286032][ T61] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 69.288519][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 69.292051][ T61] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.297015][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 69.300531][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 69.305084][ T61] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 69.307443][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 69.310873][ T61] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.315375][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 69.318931][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 69.324771][ T61] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 69.327539][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 69.330877][ T61] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.340218][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 69.353195][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 69.361871][ T61] usb 5-1: string descriptor 0 read error: -22 [ 69.364363][ T61] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 69.367288][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.381733][ T61] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 69.582819][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.199'. [ 69.615768][ T6018] usb 5-1: USB disconnect, device number 2 [ 69.695970][ T6726] loop2: detected capacity change from 0 to 7 [ 69.704544][ T6726] loop2: [ 69.706046][ T6726] loop2: partition table partially beyond EOD, truncated [ 69.846851][ T5344] loop2: [ 69.848317][ T5344] loop2: partition table partially beyond EOD, truncated [ 69.893966][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 69.893978][ T40] audit: type=1400 audit(1768962891.778:364): avc: denied { getopt } for pid=6730 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.932310][ T5344] loop2: [ 69.933569][ T5344] loop2: partition table partially beyond EOD, truncated [ 69.995178][ T6734] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 69.998713][ T40] audit: type=1400 audit(1768962891.878:365): avc: denied { relabelto } for pid=6733 comm="syz.2.213" name="82" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 70.008339][ T40] audit: type=1400 audit(1768962891.878:366): avc: denied { associate } for pid=6733 comm="syz.2.213" name="82" dev="tmpfs" ino=446 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 70.018602][ T40] audit: type=1400 audit(1768962891.878:367): avc: denied { getopt } for pid=6733 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.024115][ T5344] loop2: [ 70.025019][ T40] audit: type=1400 audit(1768962891.888:368): avc: denied { remove_name } for pid=5937 comm="syz-executor" name="binderfs" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 70.026184][ T5344] loop2: partition table partially beyond EOD, [ 70.036806][ T40] audit: type=1400 audit(1768962891.888:369): avc: denied { rmdir } for pid=5937 comm="syz-executor" name="82" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 70.054156][ T5344] truncated [ 70.082179][ T6737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.086314][ T6737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.195731][ T6737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.199075][ T6737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.216718][ T40] audit: type=1400 audit(1768962892.088:370): avc: denied { read } for pid=6741 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.225373][ T40] audit: type=1326 audit(1768962892.098:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.2.214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342738f7c9 code=0x7fc00000 [ 70.263252][ T40] audit: type=1400 audit(1768962892.138:372): avc: denied { setopt } for pid=6741 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.272308][ T40] audit: type=1400 audit(1768962892.148:373): avc: denied { write } for pid=6741 comm="syz.1.216" path="socket:[13770]" dev="sockfs" ino=13770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.272426][ T6745] Bluetooth: MGMT ver 1.23 [ 70.333623][ T6737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.336955][ T6737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.412408][ T6737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.416201][ T6737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.509811][ T6143] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.512568][ T6143] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.531135][ T6143] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.553789][ T6143] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.574962][ T6143] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.577816][ T6143] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.597756][ T6143] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.599330][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.226'. [ 70.600367][ T6143] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.838016][ T6807] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 70.840708][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 70.984967][ T6814] syzkaller0: entered promiscuous mode [ 70.985704][ T6807] SELinux: failed to load policy [ 70.987404][ T6814] syzkaller0: entered allmulticast mode [ 71.089384][ T6831] fuse: Unknown parameter 'ùÈ:D{ucàÙt¤î¸ïTÒL¯‘¿h–9^‹ŠŽs&< ³' [ 71.104101][ T6827] ªªªªªª: renamed from lo (while UP) [ 72.111885][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.115369][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.182514][ T6831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.190166][ T6831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.276521][ T6143] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.287857][ T6143] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.291490][ T6143] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.295275][ T6143] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.298518][ T6143] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.301364][ T6143] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.305158][ T6143] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.307846][ T6143] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.349069][ T6866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.250'. [ 72.354680][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.250'. [ 72.371372][ T6870] IPv6: sit1: Disabled Multicast RS [ 72.415880][ T6874] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 72.419461][ T6874] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 72.480743][ T6879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6879 comm=syz.2.254 [ 72.488780][ T6879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6879 comm=syz.2.254 [ 72.643328][ T831] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.803245][ T831] usb 8-1: Using ep0 maxpacket: 8 [ 72.806923][ T831] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.809837][ T831] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 72.814194][ T831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.819553][ T831] usb 8-1: config 0 descriptor?? [ 72.953264][ T12] net_ratelimit: 24 callbacks suppressed [ 72.953279][ T12] bond1: (slave lo): failed to get link speed/duplex [ 73.063589][ T68] bond1: (slave lo): failed to get link speed/duplex [ 73.173325][ T68] bond1: (slave lo): failed to get link speed/duplex [ 73.239240][ T831] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 73.283235][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 73.329203][ T6881] usb 8-1: USB disconnect, device number 4 [ 73.393658][ T12] bond1: (slave lo): failed to get link speed/duplex [ 73.415674][ T6920] 9pnet_virtio: no channels available for device syz [ 73.503222][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 73.599313][ T6936] __nla_validate_parse: 2 callbacks suppressed [ 73.599324][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 73.605652][ T6936] netlink: 76 bytes leftover after parsing attributes in process `syz.2.272'. [ 73.623264][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 73.773144][ T12] bond1: (slave lo): failed to get link speed/duplex [ 73.884844][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 73.984376][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 73.988365][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 74.016068][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 74.039181][ T6975] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 74.048646][ T6975] Cannot find add_set index 0 as target [ 74.113253][ T831] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 74.162502][ T6979] netlink: 'syz.0.282': attribute type 39 has an invalid length. [ 74.243447][ T831] usb 7-1: device descriptor read/64, error -71 [ 74.263585][ T6986] process 'syz.1.284' launched '/dev/fd/11' with NULL argv: empty string added [ 74.285203][ T6989] program syz.3.286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.483300][ T831] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 74.526942][ T6994] XFS (nullb0): Invalid superblock magic number [ 74.623357][ T831] usb 7-1: device descriptor read/64, error -71 [ 74.737056][ T831] usb usb7-port1: attempt power cycle [ 74.797116][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.800947][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.006875][ T7025] program syz.1.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.051000][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 75.051015][ T40] audit: type=1400 audit(1768962896.928:407): avc: denied { kexec_image_load } for pid=7026 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 75.073247][ T831] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 75.094130][ T831] usb 7-1: device descriptor read/8, error -71 [ 75.273957][ T40] audit: type=1400 audit(1768962897.158:408): avc: denied { write } for pid=7034 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.316428][ T40] audit: type=1400 audit(1768962897.198:409): avc: denied { append } for pid=7038 comm="syz.1.301" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.318018][ T7039] program syz.1.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.331649][ T40] audit: type=1400 audit(1768962897.208:410): avc: denied { read } for pid=7038 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.332916][ T7039] QAT: failed to copy from user. [ 75.334798][ T831] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 75.353713][ T831] usb 7-1: device descriptor read/8, error -71 [ 75.372960][ T7041] fuse: Unknown parameter '000000000000000000050xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 75.431771][ T40] audit: type=1400 audit(1768962897.308:411): avc: denied { map } for pid=7036 comm="syz.3.300" path="/dev/tty26" dev="devtmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 75.473202][ T831] usb usb7-port1: unable to enumerate USB device [ 75.715373][ T7058] ======================================================= [ 75.715373][ T7058] WARNING: The mand mount option has been deprecated and [ 75.715373][ T7058] and is ignored by this kernel. Remove the mand [ 75.715373][ T7058] option from the mount to silence this warning. [ 75.715373][ T7058] ======================================================= [ 75.730924][ T40] audit: type=1400 audit(1768962897.608:412): avc: denied { remount } for pid=7057 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.822499][ T7060] overlayfs: failed lookup in lower (newroot/69, name='file0', err=-40): overlapping layers [ 75.872557][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 75.983215][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.154752][ T24] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 76.157304][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 76.160399][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.167566][ T40] audit: type=1400 audit(1768962898.048:413): avc: denied { mount } for pid=7069 comm="syz.3.309" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.174675][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.178463][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 76.180981][ T24] usb 5-1: Product: syz [ 76.182322][ T24] usb 5-1: Manufacturer: syz [ 76.183997][ T24] usb 5-1: SerialNumber: syz [ 76.188693][ T24] usb 5-1: config 0 descriptor?? [ 76.197064][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 76.199520][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 76.207198][ T24] usb 5-1: selecting invalid altsetting 0 [ 76.278745][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.281532][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.307610][ T40] audit: type=1400 audit(1768962898.188:414): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.398424][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 76.403163][ T40] audit: type=1400 audit(1768962898.278:415): avc: denied { ioctl } for pid=7057 comm="syz.0.305" path="socket:[14160]" dev="sockfs" ino=14160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.411620][ T40] audit: type=1400 audit(1768962898.288:416): avc: denied { read } for pid=7081 comm="syz.3.312" lport=48258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.419725][ T7084] netlink: 'syz.3.312': attribute type 8 has an invalid length. [ 76.459428][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.465794][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.477396][ T7089] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 76.480685][ T7085] QAT: failed to copy from user cfg_data. [ 76.517804][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.521860][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.574716][ T834] usb 5-1: USB disconnect, device number 3 [ 76.583746][ T7096] mmap: syz.1.315 (7096) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.655697][ T7097] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.058940][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 77.062257][ T7109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.320'. [ 77.106503][ T7115] ./bus: Can't lookup blockdev [ 77.185053][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 77.188712][ T7119] syz.0.322: vmalloc error: size 4183572480, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 77.194033][ T7119] CPU: 0 UID: 0 PID: 7119 Comm: syz.0.322 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.194052][ T7119] Tainted: [L]=SOFTLOCKUP [ 77.194056][ T7119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.194063][ T7119] Call Trace: [ 77.194067][ T7119] [ 77.194071][ T7119] dump_stack_lvl+0x16c/0x1f0 [ 77.194106][ T7119] warn_alloc+0x248/0x3a0 [ 77.194123][ T7119] ? __pfx_warn_alloc+0x10/0x10 [ 77.194133][ T7119] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.194147][ T7119] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.194162][ T7119] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.194180][ T7119] ? kasan_save_stack+0x42/0x60 [ 77.194193][ T7119] ? kasan_save_stack+0x33/0x60 [ 77.194204][ T7119] ? kasan_save_track+0x14/0x30 [ 77.194217][ T7119] ? vb2_vmalloc_alloc+0x135/0x410 [ 77.194230][ T7119] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 77.194246][ T7119] ? __x64_sys_ioctl+0x18e/0x210 [ 77.194258][ T7119] ? do_syscall_64+0xcd/0xf80 [ 77.194271][ T7119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.194289][ T7119] ? vb2_vmalloc_alloc+0x135/0x410 [ 77.194307][ T7119] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 77.194337][ T7119] ? vb2_vmalloc_alloc+0x135/0x410 [ 77.194349][ T7119] vmalloc_user_noprof+0x9e/0xe0 [ 77.194363][ T7119] ? vb2_vmalloc_alloc+0x135/0x410 [ 77.194373][ T7119] vb2_vmalloc_alloc+0x135/0x410 [ 77.194384][ T7119] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 77.194393][ T7119] __vb2_queue_alloc+0x8c9/0x1280 [ 77.194415][ T7119] vb2_core_create_bufs+0x559/0xab0 [ 77.194439][ T7119] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 77.194459][ T7119] ? lock_acquire+0x179/0x330 [ 77.194477][ T7119] vb2_create_bufs+0x5e8/0x840 [ 77.194496][ T7119] ? __pfx_vb2_create_bufs+0x10/0x10 [ 77.194511][ T7119] ? v4l_sanitize_colorspace+0x213/0x400 [ 77.194529][ T7119] vb2_ioctl_create_bufs+0x244/0x3e0 [ 77.194545][ T7119] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.194559][ T7119] vidioc_create_bufs+0x7d/0xf0 [ 77.194574][ T7119] v4l_create_bufs+0x151/0x260 [ 77.194586][ T7119] __video_do_ioctl+0xb77/0xf00 [ 77.194600][ T7119] ? __might_fault+0xe3/0x190 [ 77.194610][ T7119] ? __pfx___video_do_ioctl+0x10/0x10 [ 77.194627][ T7119] video_usercopy+0x4d0/0x16c0 [ 77.194640][ T7119] ? __pfx___video_do_ioctl+0x10/0x10 [ 77.194651][ T7119] ? selinux_kernel_read_file+0x120/0x120 [ 77.194666][ T7119] ? __pfx_video_usercopy+0x10/0x10 [ 77.194687][ T7119] v4l2_ioctl+0x1bd/0x250 [ 77.194699][ T7119] ? __pfx_v4l2_ioctl+0x10/0x10 [ 77.194711][ T7119] __x64_sys_ioctl+0x18e/0x210 [ 77.194724][ T7119] do_syscall_64+0xcd/0xf80 [ 77.194738][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.194748][ T7119] RIP: 0033:0x7f21f538f7c9 [ 77.194757][ T7119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.194767][ T7119] RSP: 002b:00007f21f61d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.194777][ T7119] RAX: ffffffffffffffda RBX: 00007f21f55e6090 RCX: 00007f21f538f7c9 [ 77.194783][ T7119] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 0000000000000007 [ 77.194788][ T7119] RBP: 00007f21f5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.194794][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.194799][ T7119] R13: 00007f21f55e6128 R14: 00007f21f55e6090 R15: 00007fffd1fb7068 [ 77.194812][ T7119] [ 77.194816][ T7119] Mem-Info: [ 77.314002][ T7119] active_anon:9716 inactive_anon:0 isolated_anon:0 [ 77.314002][ T7119] active_file:12133 inactive_file:40639 isolated_file:0 [ 77.314002][ T7119] unevictable:1768 dirty:693 writeback:0 [ 77.314002][ T7119] slab_reclaimable:7364 slab_unreclaimable:67331 [ 77.314002][ T7119] mapped:24720 shmem:2392 pagetables:1239 [ 77.314002][ T7119] sec_pagetables:304 bounce:0 [ 77.314002][ T7119] kernel_misc_reclaimable:0 [ 77.314002][ T7119] free:455788 free_pcp:24604 free_cma:0 [ 77.330080][ T7119] Node 0 active_anon:38864kB inactive_anon:0kB active_file:48532kB inactive_file:162356kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98880kB dirty:2768kB writeback:0kB shmem:6032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13376kB pagetables:4756kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB [ 77.334294][ T7123] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 77.334555][ T7122] IPVS: stopping master sync thread 7123 ... [ 77.341625][ T7119] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 77.357239][ T7119] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.369609][ T7119] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 77.371778][ T7119] Node 0 DMA32 free:216672kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38740kB inactive_anon:0kB active_file:48532kB inactive_file:162356kB unevictable:3536kB writepending:2768kB zspages:0kB present:2080628kB managed:1265144kB mlocked:0kB bounce:0kB free_pcp:76444kB local_pcp:21740kB free_cma:0kB [ 77.383325][ T7119] lowmem_reserve[]: 0 0 0 0 0 [ 77.384895][ T7119] Node 1 Normal free:1591120kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:22400kB local_pcp:4832kB free_cma:0kB [ 77.396577][ T7119] lowmem_reserve[]: 0 0 0 0 0 [ 77.398564][ T7119] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.403983][ T7119] Node 0 DMA32: 658*4kB (UME) 582*8kB (UME) 962*16kB (UME) 832*32kB (UME) 241*64kB (UME) 155*128kB (UME) 20*256kB (UME) 10*512kB (ME) 5*1024kB (UME) 7*2048kB (UM) 25*4096kB (UM) = 216664kB [ 77.410059][ T7119] Node 1 Normal: 8*4kB (UME) 34*8kB (UE) 26*16kB (UME) 38*32kB (UME) 23*64kB (UME) 8*128kB (UME) 2*256kB (UE) 6*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 385*4096kB (M) = 1591120kB [ 77.416000][ T7119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.419419][ T7119] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.423010][ T7119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.427292][ T7119] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.430276][ T7119] 55160 total pagecache pages [ 77.431819][ T7119] 0 pages in swap cache [ 77.433127][ T7119] Free swap = 124996kB [ 77.434475][ T7119] Total swap = 124996kB [ 77.435809][ T7119] 1048443 pages RAM [ 77.437130][ T7119] 0 pages HighMem/MovableOnly [ 77.438642][ T7119] 282846 pages reserved [ 77.439945][ T7119] 0 pages cma reserved [ 77.540414][ T7133] program syz.3.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.831548][ T7139] netlink: 'syz.2.329': attribute type 10 has an invalid length. [ 77.834126][ T7139] bridge_slave_1: left allmulticast mode [ 77.835936][ T7139] bridge_slave_1: left promiscuous mode [ 77.837931][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.941690][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.330'. [ 77.945932][ C1] sr 2:0:0:0: [sr0] tag#9 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 77.949311][ C1] sr 2:0:0:0: [sr0] tag#9 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 78.078229][ T6143] net_ratelimit: 38 callbacks suppressed [ 78.078241][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 78.083102][ T7154] mtd partition "" doesn't have enough space: 0x20003 < 0x40000, disabled [ 78.093700][ T7154] ftl_cs: FTL header not found. [ 78.133257][ T7154] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 78.197147][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 78.200986][ T7163] /dev/loop0: Can't open blockdev [ 78.329553][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 78.358565][ T7181] Cannot find map_set index 65532 as target [ 78.435776][ T7189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=912 sclass=netlink_route_socket pid=7189 comm=syz.0.338 [ 78.435800][ T7190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=912 sclass=netlink_route_socket pid=7190 comm=syz.0.338 [ 78.449517][ T7185] veth3: entered promiscuous mode [ 78.451285][ T7185] veth3: entered allmulticast mode [ 78.454627][ T7185] bridge2: port 1(veth3) entered blocking state [ 78.457589][ T7185] bridge2: port 1(veth3) entered disabled state [ 78.464554][ T7185] bridge2: port 1(veth3) entered blocking state [ 78.467333][ T7185] bridge2: port 1(veth3) entered forwarding state [ 78.495959][ T7185] veth5: entered promiscuous mode [ 78.497603][ T7185] veth5: entered allmulticast mode [ 78.499682][ T7185] bridge2: port 2(veth5) entered blocking state [ 78.501740][ T7185] bridge2: port 2(veth5) entered disabled state [ 78.505151][ T7185] bridge2: port 2(veth5) entered blocking state [ 78.507379][ T7185] bridge2: port 2(veth5) entered forwarding state [ 78.527777][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 78.655878][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 78.773250][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 78.865726][ T7201] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 78.893420][ T7201] bond1: entered promiscuous mode [ 78.895456][ T7201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.905756][ T7201] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 78.909808][ T7201] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 78.914890][ T7201] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 78.965413][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 79.084113][ T831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 79.205641][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 79.212770][ T831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 79.220816][ T68] bridge2: port 1(veth3) entered disabled state [ 79.236682][ T68] bridge2: port 2(veth5) entered disabled state [ 79.340290][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 79.418195][ T7242] 9p: Bad value for 'wfdno' [ 79.463120][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 80.243076][ T7257] __nla_validate_parse: 2 callbacks suppressed [ 80.243089][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 80.357850][ T7264] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 80.360607][ T7264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.363391][ T7264] vhci_hcd vhci_hcd.0: Device attached [ 80.399213][ T7268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.354'. [ 80.406979][ T7268] tap0: tun_chr_ioctl cmd 1074025678 [ 80.408950][ T7268] tap0: group set to 0 [ 80.612135][ T6018] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 80.632167][ T7280] kvm: MWAIT instruction emulated as NOP! [ 80.829521][ T7288] 9pnet_virtio: no channels available for device syz [ 80.964500][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 80.964518][ T40] audit: type=1400 audit(1768962902.607:441): avc: denied { ioctl } for pid=7294 comm="syz.0.363" path="socket:[16362]" dev="sockfs" ino=16362 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 80.978927][ T40] audit: type=1400 audit(1768962902.626:442): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.016743][ T40] audit: type=1400 audit(1768962902.654:443): avc: denied { mounton } for pid=7296 comm="syz.0.364" path="/bus" dev="ramfs" ino=18454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 81.020263][ T7297] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.028570][ T7297] overlayfs: failed to set xattr on upper [ 81.031081][ T7297] overlayfs: ...falling back to redirect_dir=nofollow. [ 81.033968][ T7297] overlayfs: ...falling back to index=off. [ 81.036471][ T7297] overlayfs: ...falling back to uuid=null. [ 81.038963][ T7297] overlayfs: ...falling back to xino=off. [ 81.042334][ T7297] overlayfs: conflicting lowerdir path [ 81.064229][ T40] audit: type=1400 audit(1768962902.710:444): avc: denied { append } for pid=7292 comm="syz.1.362" path="/88/file0/cgroup.controllers" dev="9p" ino=71827927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.093830][ T40] audit: type=1400 audit(1768962902.738:445): avc: denied { map } for pid=7292 comm="syz.1.362" path="/88/file0/cgroup.controllers" dev="9p" ino=71827927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.360712][ T6025] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 81.364524][ T40] audit: type=1400 audit(1768962902.990:446): avc: denied { write } for pid=7306 comm="syz.1.367" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.511071][ T40] audit: type=1400 audit(1768962903.131:447): avc: denied { create } for pid=7308 comm="syz.2.368" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.528062][ T40] audit: type=1400 audit(1768963159.146:448): avc: denied { write } for pid=7308 comm="syz.2.368" name="file0" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.537610][ T40] audit: type=1400 audit(1768963159.146:449): avc: denied { open } for pid=7308 comm="syz.2.368" path="/110/file0" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.544506][ T6025] usb 5-1: not running at top speed; connect to a high speed hub [ 81.550476][ T6025] usb 5-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 81.557918][ T6025] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.558700][ T40] audit: type=1400 audit(1768963159.165:450): avc: denied { unlink } for pid=5937 comm="syz-executor" name="file0" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.564275][ T6025] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.573313][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.585273][ T6025] usb 5-1: Product: syz [ 81.587138][ T6025] usb 5-1: Manufacturer: syz [ 81.589121][ T6025] usb 5-1: SerialNumber: syz [ 81.628110][ T59] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 81.811266][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.816345][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.819925][ T59] usb 6-1: config 0 has no interfaces? [ 81.821786][ T59] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 81.824919][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.830889][ T59] usb 6-1: config 0 descriptor?? [ 82.040078][ T7302] binder: BINDER_SET_CONTEXT_MGR already set [ 82.042241][ T7302] binder: 7301:7302 ioctl 40046207 0 returned -16 [ 82.045032][ T5944] Bluetooth: hci0: unexpected event for opcode 0x201c [ 82.047989][ T6025] usb 5-1: 0:2 : does not exist [ 82.062186][ T6025] usb 5-1: USB disconnect, device number 4 [ 82.083586][ T7307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8320 sclass=netlink_route_socket pid=7307 comm=syz.1.367 [ 82.103195][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.111935][ T59] usb 6-1: USB disconnect, device number 2 [ 82.395346][ T7350] (syz.2.380,7350,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 82.399436][ T7350] (syz.2.380,7350,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 82.938030][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.387'. [ 82.957104][ T831] e1000 0000:00:06.0 eth0: Reset adapter [ 83.019593][ T7385] loop8: detected capacity change from 0 to 7 [ 83.024918][ T5934] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 83.028022][ T5934] loop8: partition table partially beyond EOD, truncated [ 83.040793][ T5934] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 83.046186][ T5934] loop8: p2 start 956478 is beyond EOD, truncated [ 83.053629][ T7385] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 83.056134][ T7385] loop8: partition table partially beyond EOD, truncated [ 83.058507][ T7385] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 83.062849][ T7385] loop8: p2 start 956478 is beyond EOD, truncated [ 83.073468][ T831] e1000 0000:00:06.0 eth0: Reset adapter [ 83.110144][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 83.130533][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 83.163525][ T7396] random: crng reseeded on system resumption [ 83.184398][ T24] IPVS: starting estimator thread 0... [ 83.189982][ T831] e1000 0000:00:06.0 eth0: Reset adapter [ 83.275267][ T7397] IPVS: using max 46 ests per chain, 110400 per kthread [ 83.400718][ T7404] Invalid logical block size (6) [ 83.409970][ T7404] netlink: 388 bytes leftover after parsing attributes in process `syz.1.394'. [ 83.415500][ T7405] Invalid logical block size (6) [ 83.446685][ T6143] net_ratelimit: 33 callbacks suppressed [ 83.446699][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 83.497129][ T7265] vhci_hcd: connection reset by peer [ 83.500851][ T1235] vhci_hcd vhci_hcd.3: stop threads [ 83.502597][ T1235] vhci_hcd vhci_hcd.3: release socket [ 83.504501][ T1235] vhci_hcd vhci_hcd.3: disconnect device [ 83.564110][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 83.681580][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 83.800033][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 83.928264][ T12] bond1: (slave lo): failed to get link speed/duplex [ 84.050050][ T962] cfg80211: failed to load regulatory.db [ 84.056211][ T12] bond1: (slave lo): failed to get link speed/duplex [ 84.184578][ T68] bond1: (slave lo): failed to get link speed/duplex [ 84.301908][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 84.419501][ T12] bond1: (slave lo): failed to get link speed/duplex [ 84.537277][ T12] bond1: (slave lo): failed to get link speed/duplex [ 85.522577][ T831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 86.110621][ T6018] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 88.815400][ T1235] net_ratelimit: 35 callbacks suppressed [ 88.815413][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 88.932995][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 89.050606][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 89.178996][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 89.296879][ T12] bond1: (slave lo): failed to get link speed/duplex [ 89.414233][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 89.532216][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 89.660173][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 89.777916][ T12] bond1: (slave lo): failed to get link speed/duplex [ 89.896032][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 94.280525][ T12] net_ratelimit: 36 callbacks suppressed [ 94.280539][ T12] bond1: (slave lo): failed to get link speed/duplex [ 94.408992][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 94.526682][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 94.644287][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 94.762200][ T12] bond1: (slave lo): failed to get link speed/duplex [ 94.879556][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 94.997171][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 95.125435][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 95.243118][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 95.361185][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 95.889091][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 95.889101][ T40] audit: type=1400 audit(1768963172.563:460): avc: denied { create } for pid=7440 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 95.897285][ T40] audit: type=1400 audit(1768963172.563:461): avc: denied { setopt } for pid=7440 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 95.904292][ T7441] netlink: 96 bytes leftover after parsing attributes in process `syz.0.395'. [ 99.746035][ T6147] net_ratelimit: 36 callbacks suppressed [ 99.746053][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 99.863477][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 99.981419][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 100.099054][ T68] bond1: (slave lo): failed to get link speed/duplex [ 100.216438][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 100.334240][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 100.451719][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 100.569354][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 100.687286][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 100.804707][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 103.605294][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 103.610443][ T40] audit: type=1400 audit(1768963179.782:462): avc: denied { append } for pid=7450 comm="syz.2.398" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 103.621265][ T7455] netlink: 14 bytes leftover after parsing attributes in process `syz.1.397'. [ 103.628558][ T40] audit: type=1400 audit(1768963179.782:463): avc: denied { getopt } for pid=7451 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.662704][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'. [ 103.695481][ T7460] syz.2.400 (7460): drop_caches: 2 [ 103.753117][ T40] audit: type=1400 audit(1768963179.912:464): avc: denied { ioctl } for pid=7468 comm="syz.1.402" path="socket:[19574]" dev="sockfs" ino=19574 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.781777][ T40] audit: type=1400 audit(1768963179.950:465): avc: denied { accept } for pid=7468 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.787858][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.798631][ T7457] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 103.851413][ T7474] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=7474 comm=syz.0.403 [ 103.855680][ T7474] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2563 sclass=netlink_xfrm_socket pid=7474 comm=syz.0.403 [ 103.887041][ T40] audit: type=1400 audit(1768963180.043:466): avc: denied { ioctl } for pid=7475 comm="syz.0.404" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.072260][ T7482] ocfs2: Unknown parameter 'grpquota¹sï• ¤W [ 104.072260][ T7482] ß›±[Q‹iÑÞª' [ 104.077079][ T7482] tmpfs: Bad value for 'mpol' [ 104.142518][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 104.156419][ T7487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.165248][ T7487] bond3: (slave batadv1): Opening slave failed [ 104.204900][ T40] audit: type=1400 audit(1768963180.333:467): avc: denied { write } for pid=7478 comm="syz.3.405" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.416034][ T40] audit: type=1400 audit(1768963180.539:468): avc: denied { lock } for pid=7493 comm="syz.2.409" path="/133/file0/cpuset.memory_pressure_enabled" dev="9p" ino=71827933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.870634][ T40] audit: type=1400 audit(1768963180.969:469): avc: denied { ioctl } for pid=7519 comm="syz.2.417" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.907186][ T7523] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 104.912195][ T7525] overlayfs: missing 'lowerdir' [ 105.036318][ T5944] Bluetooth: hci0: unexpected cc 0x041a length: 1 < 7 [ 105.039240][ T5944] Bluetooth: hci0: unexpected event for opcode 0x041a [ 105.052393][ T7529] sp0: Synchronizing with TNC [ 105.058232][ T7529] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 105.076538][ T7529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.085506][ T40] audit: type=1400 audit(1768963181.165:470): avc: denied { append } for pid=7528 comm="syz.0.420" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.095692][ T7528] [U] è [ 105.125582][ T6143] net_ratelimit: 36 callbacks suppressed [ 105.125627][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 105.243181][ T68] bond1: (slave lo): failed to get link speed/duplex [ 105.292047][ T40] audit: type=1400 audit(1768963181.352:471): avc: denied { map } for pid=7548 comm="syz.1.426" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.332669][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 105.363521][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.366672][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.370343][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.374931][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.392820][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 105.419573][ T7559] binder: 7551:7559 ioctl 5393 200000000500 returned -22 [ 105.510455][ T68] bond1: (slave lo): failed to get link speed/duplex [ 105.638810][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 105.660129][ T34] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 105.700435][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 105.756769][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 105.771632][ T7572] mac80211_hwsim hwsim5 : renamed from wlan1 [ 105.799336][ T34] usb 5-1: device descriptor read/64, error -71 [ 105.884762][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 106.013158][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 106.066701][ T34] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 106.130815][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 106.205607][ T34] usb 5-1: device descriptor read/64, error -71 [ 106.248691][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 106.323785][ T34] usb usb5-port1: attempt power cycle [ 106.578799][ T7576] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.434'. [ 106.678499][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.436'. [ 106.686926][ T34] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 106.709252][ T34] usb 5-1: device descriptor read/8, error -71 [ 106.858303][ T7588] netlink: 64 bytes leftover after parsing attributes in process `syz.2.438'. [ 106.965057][ T34] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 106.987062][ T34] usb 5-1: device descriptor read/8, error -71 [ 106.990968][ T7592] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 106.997857][ T7592] bond4 (unregistering): Released all slaves [ 107.016398][ T7594] Bluetooth: hci0: service_discovery: too big uuid_count value 18191 [ 107.104456][ T34] usb usb5-port1: unable to enumerate USB device [ 107.775852][ T7621] random: crng reseeded on system resumption [ 107.911369][ T7624] cgroup2: Unknown parameter 'pids' [ 107.914496][ T7624] fuseblk: Bad value for 'fd' [ 108.035602][ T34] IPVS: starting estimator thread 0... [ 108.045991][ T7632] netlink: 'syz.1.452': attribute type 39 has an invalid length. [ 108.130736][ T7633] IPVS: using max 47 ests per chain, 112800 per kthread [ 108.194717][ T7644] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 108.200163][ T7644] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 108.204299][ T7644] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 108.208492][ T7644] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 108.401805][ T7659] nbd: must specify at least one socket [ 108.642394][ T7686] program syz.3.470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.939104][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 108.941969][ T7711] bridge_slave_1: left allmulticast mode [ 108.944653][ T7711] bridge_slave_1: left promiscuous mode [ 108.946844][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.951426][ T7711] bridge_slave_0: left allmulticast mode [ 108.953268][ T7711] bridge_slave_0: left promiscuous mode [ 108.955294][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.072832][ T7724] team0 (unregistering): Port device team_slave_0 removed [ 109.076353][ T7724] team0 (unregistering): Port device team_slave_1 removed [ 109.290136][ T7740] fuseblk: Unknown parameter 'dont_hash' [ 109.351864][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 109.351874][ T40] audit: type=1400 audit(1768963185.158:493): avc: denied { sqpoll } for pid=7739 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.361034][ T40] audit: type=1400 audit(1768963185.167:494): avc: denied { connect } for pid=7747 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.368905][ T40] audit: type=1400 audit(1768963185.167:495): avc: denied { ioctl } for pid=7747 comm="syz.2.488" path="socket:[20703]" dev="sockfs" ino=20703 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.451200][ T7749] xt_l2tp: missing protocol rule (udp|l2tpip) [ 109.693229][ T7754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.489'. [ 109.716546][ T40] audit: type=1400 audit(1768963185.494:496): avc: denied { mount } for pid=7753 comm="syz.2.489" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.763487][ T61] IPVS: starting estimator thread 0... [ 109.866504][ T7765] IPVS: using max 47 ests per chain, 112800 per kthread [ 109.886101][ T40] audit: type=1400 audit(1768963185.653:497): avc: denied { module_load } for pid=7774 comm="syz.3.496" path="/sys/kernel/notes" dev="sysfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 109.968773][ T7781] use of bytesused == 0 is deprecated and will be removed in the future, [ 109.972306][ T7781] use the actual size instead. [ 110.300738][ T40] audit: type=1400 audit(1768963186.037:498): avc: denied { setopt } for pid=7799 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.347473][ T7802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.359895][ T7802] XFS (nullb0): Invalid superblock magic number [ 110.495658][ T7811] sd 0:0:0:0: PR command failed: 1026 [ 110.497619][ T7811] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 110.499903][ T7811] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 110.524697][ T7811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.530093][ T7811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.547882][ T6143] net_ratelimit: 34 callbacks suppressed [ 110.547897][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 110.592897][ T7811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.596702][ T7811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.657856][ T7811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.661100][ T7811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.687036][ T12] bond1: (slave lo): failed to get link speed/duplex [ 110.770310][ T7811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.773491][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 110.774528][ T7811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.805251][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 110.816380][ T7816] tmpfs: User quota block hardlimit too large. [ 110.853960][ T7818] loop5: detected capacity change from 0 to 7 [ 110.860196][ T7534] Dev loop5: unable to read RDB block 7 [ 110.862493][ T7534] loop5: unable to read partition table [ 110.864918][ T7534] loop5: partition table beyond EOD, truncated [ 110.865841][ T7820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.510'. [ 110.872125][ T6143] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.878229][ T6143] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.888857][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.892004][ T7818] Dev loop5: unable to read RDB block 7 [ 110.892615][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.893877][ T7818] loop5: unable to read partition table [ 110.893996][ T7818] loop5: partition table beyond EOD, truncated [ 110.903362][ T7818] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 110.909408][ T7818] netlink: 'syz.3.509': attribute type 21 has an invalid length. [ 110.925498][ T6143] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.928367][ T6143] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.931787][ T6143] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.935492][ T6143] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.939590][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.509'. [ 110.943743][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 110.994809][ T7826] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 111.042717][ T40] audit: type=1400 audit(1768963186.738:499): avc: denied { listen } for pid=7834 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.054061][ T40] audit: type=1400 audit(1768963186.738:500): avc: denied { accept } for pid=7834 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.071975][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 111.082019][ T40] audit: type=1400 audit(1768963186.766:501): avc: denied { append } for pid=7847 comm="syz.1.517" name="pfkey" dev="proc" ino=4026533406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.085574][ T7851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.517'. [ 111.145052][ T7854] dlm: no locking on control device [ 111.190727][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 111.217205][ T7854] dlm: no locking on control device [ 111.317938][ T68] bond1: (slave lo): failed to get link speed/duplex [ 111.350065][ T5993] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 111.435708][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 111.471920][ T40] audit: type=1400 audit(1768963187.140:502): avc: denied { read } for pid=7872 comm="syz.1.524" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.478339][ T6018] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 111.533329][ T5993] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.537244][ T5993] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.540847][ T5993] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.544393][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.548934][ T7835] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.553269][ T5993] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.564027][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 111.665093][ T6018] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 111.668302][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 111.671050][ T6018] usb 7-1: Product: syz [ 111.672380][ T6018] usb 7-1: Manufacturer: syz [ 111.674272][ T6018] usb 7-1: SerialNumber: syz [ 111.678150][ T6018] usb 7-1: config 0 descriptor?? [ 111.681728][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 111.682557][ T6018] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 111.688213][ T6018] dvb-usb: bulk message failed: -22 (2/0) [ 111.694450][ T6018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.697905][ T6018] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 111.700501][ T6018] usb 7-1: media controller created [ 111.708751][ T6018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.769447][ T29] usb 5-1: USB disconnect, device number 9 [ 111.862110][ T7895] netlink: 260 bytes leftover after parsing attributes in process `syz.1.530'. [ 111.866818][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 111.900060][ T7857] dvb-usb: bulk message failed: -22 (4/0) [ 111.904334][ T7857] cxusb: i2c read failed [ 111.983156][ T7904] netlink: 196 bytes leftover after parsing attributes in process `syz.2.520'. [ 111.987426][ T7904] netlink: 196 bytes leftover after parsing attributes in process `syz.2.520'. [ 111.991385][ T7904] netlink: 19 bytes leftover after parsing attributes in process `syz.2.520'. [ 112.064013][ T7914] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 112.318855][ T7929] bond1: option mode: unable to set because the bond device has slaves [ 112.479316][ T7933] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 112.482534][ T7933] overlayfs: failed to set xattr on upper [ 112.485197][ T7933] overlayfs: ...falling back to redirect_dir=nofollow. [ 112.488165][ T7933] overlayfs: ...falling back to index=off. [ 112.490726][ T7933] overlayfs: ...falling back to uuid=null. [ 112.493257][ T7933] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 113.050488][ T7903] comedi comedi2: reset error (fatal) [ 113.706820][ T7962] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20004 [ 113.970286][ T962] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 114.109329][ T962] usb 6-1: device descriptor read/64, error -71 [ 114.366244][ T962] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 114.449492][ T6018] cxusb: set interface failed [ 114.458413][ T6018] dvb-usb: bulk message failed: -22 (1/0) [ 114.481595][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 114.482469][ T6018] DVB: Unable to find symbol mt352_attach() [ 114.484893][ T5944] Bluetooth: Wrong link type (-22) [ 114.486597][ T6018] dvb-usb: bulk message failed: -22 (5/0) [ 114.488203][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 114.488213][ T5944] Bluetooth: Wrong link type (-22) [ 114.488229][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 114.488236][ T5944] Bluetooth: Wrong link type (-22) [ 114.488263][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 114.488269][ T5944] Bluetooth: Wrong link type (-22) [ 114.488299][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 114.490650][ T6018] zl10353_read_register: readreg error (reg=127, ret==-121) [ 114.492885][ T5944] Bluetooth: Wrong link type (-22) [ 114.494961][ T6018] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 114.505078][ T962] usb 6-1: device descriptor read/64, error -71 [ 114.507954][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 114.516085][ T5944] Bluetooth: Wrong link type (-22) [ 114.518209][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 114.520917][ T5944] Bluetooth: Wrong link type (-22) [ 114.523122][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 114.525855][ T5944] Bluetooth: Wrong link type (-22) [ 114.537496][ T7972] pim6reg1: entered promiscuous mode [ 114.539164][ T7972] pim6reg1: entered allmulticast mode [ 114.549458][ T6018] rc_core: IR keymap rc-dvico-mce not found [ 114.551398][ T6018] Registered IR keymap rc-empty [ 114.554228][ T6018] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 114.558272][ T6018] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input10 [ 114.565931][ T6018] dvb-usb: schedule remote query interval to 100 msecs. [ 114.568578][ T6018] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 114.575720][ T6018] usb 7-1: USB disconnect, device number 6 [ 114.606913][ T6018] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 114.622974][ T962] usb usb6-port1: attempt power cycle [ 114.693123][ T7977] netlink: 'syz.2.555': attribute type 3 has an invalid length. [ 114.695838][ T7977] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 114.862383][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 114.862395][ T40] audit: type=1400 audit(1768963190.310:516): avc: denied { mounton } for pid=7983 comm="syz.2.557" path="/185/file0" dev="tmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 114.862405][ T7984] 9p: Bad value for 'rfdno' [ 114.978691][ T7992] vivid-000: ================= START STATUS ================= [ 114.981255][ T7992] vivid-000: Radio HW Seek Mode: Bounded [ 114.983333][ T7992] vivid-000: Radio Programmable HW Seek: false [ 114.985757][ T7992] vivid-000: RDS Rx I/O Mode: Block I/O [ 114.986700][ T962] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 114.989329][ T7992] vivid-000: Generate RBDS Instead of RDS: false [ 114.993057][ T7992] vivid-000: RDS Reception: true [ 114.994772][ T7992] vivid-000: RDS Program Type: 0 inactive [ 114.996655][ T7992] vivid-000: RDS PS Name: inactive [ 114.998525][ T7992] vivid-000: RDS Radio Text: inactive [ 115.000313][ T7992] vivid-000: RDS Traffic Announcement: false inactive [ 115.002616][ T7992] vivid-000: RDS Traffic Program: false inactive [ 115.004661][ T7992] vivid-000: RDS Music: false inactive [ 115.006456][ T7992] vivid-000: ================== END STATUS ================== [ 115.009255][ T962] usb 6-1: device descriptor read/8, error -71 [ 115.046757][ T7994] overlayfs: missing 'workdir' [ 115.050069][ T7994] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 115.052940][ T7994] overlayfs: failed to set xattr on upper [ 115.055209][ T7994] overlayfs: ...falling back to redirect_dir=nofollow. [ 115.057923][ T7994] overlayfs: ...falling back to index=off. [ 115.060225][ T7994] overlayfs: ...falling back to uuid=null. [ 115.062707][ T7994] overlayfs: conflicting lowerdir path [ 115.236693][ T8004] __nla_validate_parse: 7 callbacks suppressed [ 115.236710][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'. [ 115.264405][ T962] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 115.286643][ T962] usb 6-1: device descriptor read/8, error -71 [ 115.355453][ T40] audit: type=1400 audit(1768963190.768:517): avc: denied { connect } for pid=8013 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 115.366125][ T8014] Invalid logical block size (2047) [ 115.403630][ T962] usb usb6-port1: unable to enumerate USB device [ 115.429558][ T8021] program syz.2.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.653713][ T40] audit: type=1400 audit(1768963191.048:518): avc: denied { create } for pid=8026 comm="syz.0.570" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.660895][ T40] audit: type=1400 audit(1768963191.058:519): avc: denied { setattr } for pid=8026 comm="syz.0.570" name="#15" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.667983][ T40] audit: type=1400 audit(1768963191.058:520): avc: denied { rename } for pid=8026 comm="syz.0.570" name="#15" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.668015][ T40] audit: type=1400 audit(1768963191.058:521): avc: denied { link } for pid=8026 comm="syz.0.570" name="00fb210001da4550b3520f45dab8ef28b950d926ed6fdb01c85302000000000000" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.701502][ T40] audit: type=1400 audit(1768963191.086:522): avc: denied { block_suspend } for pid=8026 comm="syz.0.570" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.812404][ T24] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 115.816426][ T40] audit: type=1400 audit(1768963191.198:523): avc: denied { read } for pid=8028 comm="syz.0.571" path="socket:[21861]" dev="sockfs" ino=21861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.865232][ T8031] sch_tbf: burst 19872 is lower than device lo mtu (65525) ! [ 115.993885][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 115.997326][ T24] usb 7-1: config 0 has no interface number 0 [ 115.999990][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.005176][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 116.008650][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 116.012287][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 116.016104][ T1235] net_ratelimit: 35 callbacks suppressed [ 116.016115][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 116.016377][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 116.024197][ T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.029325][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 116.032262][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.040405][ T24] usb 7-1: config 0 descriptor?? [ 116.042835][ T8025] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.050351][ T8025] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.056394][ T40] audit: type=1400 audit(1768963191.422:524): avc: denied { getopt } for pid=8030 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.065436][ T24] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 116.130790][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 116.259135][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 116.279852][ T24] usb 7-1: USB disconnect, device number 7 [ 116.284374][ T24] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 116.376930][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 116.494498][ T6143] bond1: (slave lo): failed to get link speed/duplex [ 116.612656][ T12] bond1: (slave lo): failed to get link speed/duplex [ 116.729992][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 116.836646][ T5944] Bluetooth: hci2: command tx timeout [ 116.847698][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 116.908061][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 116.909511][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 116.921728][ T8040] binder_alloc: binder_alloc_mmap_handler: 8039 200000ffd000-200001000000 already mapped failed -16 [ 116.926044][ T8040] binder: BINDER_SET_CONTEXT_MGR already set [ 116.928029][ T8040] binder: 8039:8040 ioctl 4018620d 200000004a80 returned -16 [ 116.947328][ T8041] binder_alloc: 8039: binder_alloc_buf, no vma [ 116.955286][ T40] audit: type=1400 audit(1768963192.264:525): avc: denied { checkpoint_restore } for pid=8044 comm="syz.0.576" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.965076][ T12] bond1: (slave lo): failed to get link speed/duplex [ 117.019601][ T8056] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.580'. [ 117.034677][ T8041] veth3: entered promiscuous mode [ 117.036332][ T8041] veth3: entered allmulticast mode [ 117.038402][ T8041] bridge5: port 1(veth3) entered blocking state [ 117.040856][ T8041] bridge5: port 1(veth3) entered disabled state [ 117.046571][ T8041] bridge5: port 1(veth3) entered blocking state [ 117.048634][ T8041] bridge5: port 1(veth3) entered forwarding state [ 117.053083][ T1235] bridge5: port 1(veth3) entered disabled state [ 117.053104][ T8061] MPI: mpi too large (124808 bits) [ 117.065476][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 117.082736][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 117.108764][ T8067] tmpfs: User quota block hardlimit too large. [ 117.140017][ T8069] syz.0.585 (8069): attempted to duplicate a private mapping with mremap. This is not supported. [ 117.170150][ T8072] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 117.185667][ T8072] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.586'. [ 117.267131][ T8084] overlayfs: failed to resolve './bus': -2 [ 117.402714][ T8094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.591'. [ 117.943146][ T8117] hpfs: Bad magic ... probably not HPFS [ 117.952352][ T8117] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.980621][ T8117] netlink: 48 bytes leftover after parsing attributes in process `syz.2.595'. [ 117.992698][ T8117] bond4: peer notification delay (2365) is not a multiple of miimon (16391), value rounded to 0 ms [ 117.998618][ T8117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8117 comm=syz.2.595 [ 118.496775][ T8171] netlink: 'syz.2.613': attribute type 12 has an invalid length. [ 118.621245][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 118.625132][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.616'. [ 119.617010][ T8208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8208 comm=syz.0.624 [ 119.772658][ T34] hid (null): bogus close delimiter [ 119.775163][ T34] hid (null): unknown global tag 0xc [ 119.782721][ T34] hid-generic 0EBD:80000000:0007.0005: bogus close delimiter [ 119.786053][ T34] hid-generic 0EBD:80000000:0007.0005: item 0 0 2 10 parsing failed [ 119.791133][ T34] hid-generic 0EBD:80000000:0007.0005: probe with driver hid-generic failed with error -22 [ 120.109376][ T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.269742][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 120.273041][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.275112][ T34] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.278036][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.282139][ T34] usb 5-1: config 0 descriptor?? [ 120.451592][ T6018] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 120.622699][ T6018] usb 6-1: Using ep0 maxpacket: 8 [ 120.626987][ T6018] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 120.630520][ T6018] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.634676][ T6018] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.638717][ T6018] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.642794][ T6018] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.648346][ T6018] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.652052][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.716228][ T34] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 120.874296][ T6018] usb 6-1: usb_control_msg returned -32 [ 120.876670][ T6018] usbtmc 6-1:16.0: can't read capabilities [ 120.882055][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.885029][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.940920][ T8214] i2c i2c-2: unsupported multi-msg i2c transaction [ 120.945081][ T61] usb 5-1: USB disconnect, device number 10 [ 121.269011][ T8217] usbtmc 6-1:16.0: control status returned 0 [ 121.330857][ T8218] netem: incorrect gi model size [ 121.333097][ T8218] netem: change failed [ 121.393214][ T6141] net_ratelimit: 36 callbacks suppressed [ 121.393235][ T6141] bond1: (slave lo): failed to get link speed/duplex [ 121.486653][ T61] usb 6-1: USB disconnect, device number 7 [ 121.510474][ T6141] bond1: (slave lo): failed to get link speed/duplex [ 121.551543][ T8225] macsec1: entered promiscuous mode [ 121.553977][ T8225] macsec1: entered allmulticast mode [ 121.584038][ T8228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 121.606804][ T8228] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=8228 comm=syz.0.631 [ 121.628150][ T689] bond1: (slave lo): failed to get link speed/duplex [ 121.646053][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 121.646064][ T40] audit: type=1400 audit(118.699:543): avc: denied { node_bind } for pid=8234 comm="syz.0.633" saddr=fc01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 121.699611][ T8245] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 121.736291][ T40] audit: type=1400 audit(118.792:544): avc: denied { getopt } for pid=8246 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.756562][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 121.822934][ T8247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8247 comm=syz.3.636 [ 121.874587][ T6141] bond1: (slave lo): failed to get link speed/duplex [ 121.974491][ T8262] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 122.002607][ T6144] bond1: (slave lo): failed to get link speed/duplex [ 122.120601][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 122.142623][ T40] audit: type=1400 audit(119.166:545): avc: denied { map } for pid=8266 comm="syz.0.642" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.154616][ T40] audit: type=1400 audit(119.166:546): avc: denied { execute } for pid=8266 comm="syz.0.642" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.161089][ T8269] could not allocate digest TFM handle crct10dif-generic [ 122.259534][ T68] bond1: (slave lo): failed to get link speed/duplex [ 122.290058][ T8286] XFS (nbd1): no-recovery mounts must be read-only. [ 122.348804][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 122.376926][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 122.400909][ T8305] macsec0: entered promiscuous mode [ 122.401133][ T8305] macsec0: entered allmulticast mode [ 122.406786][ T8305] veth1_macvtap: entered allmulticast mode [ 122.430620][ T8305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.652'. [ 122.438010][ T40] audit: type=1400 audit(119.438:547): avc: denied { map } for pid=8304 comm="syz.1.653" path="socket:[22080]" dev="sockfs" ino=22080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.448074][ T40] audit: type=1400 audit(119.438:548): avc: denied { read } for pid=8304 comm="syz.1.653" path="socket:[22080]" dev="sockfs" ino=22080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.494801][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 122.521023][ T40] audit: type=1400 audit(119.522:549): avc: denied { ioctl } for pid=8320 comm="syz.3.659" path="socket:[23806]" dev="sockfs" ino=23806 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.536847][ T40] audit: type=1400 audit(119.531:550): avc: denied { bpf } for pid=8326 comm="syz.1.660" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.543157][ T40] audit: type=1400 audit(119.531:551): avc: denied { perfmon } for pid=8326 comm="syz.1.660" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.550039][ T40] audit: type=1400 audit(119.531:552): avc: denied { module_request } for pid=8325 comm="syz.0.657" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 122.573845][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 122.581768][ T8327] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 122.594924][ T8327] bond0: (slave ): Enslaving as an active interface with an up link [ 122.598835][ T8327] MTD: Couldn't look up '/dev/sg0': -15 [ 122.600656][ T8327] /dev/sg0: Can't lookup blockdev [ 122.741780][ T8364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.668'. [ 122.812621][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 122.827192][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 122.912071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.286057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.629768][ T8411] kAFS: unable to lookup cell '(,' [ 123.694825][ T8412] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.698169][ T8412] block device autoloading is deprecated and will be removed. [ 123.735082][ T61] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 123.748033][ T8411] md: invalid raid superblock magic on ram0 [ 123.750525][ T8411] md: ram0 does not have a valid v0.0 superblock, not importing! [ 123.756501][ T8411] md: md_import_device returned -22 [ 123.805667][ T8421] netlink: 216 bytes leftover after parsing attributes in process `syz.3.684'. [ 123.845959][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 123.849148][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 123.918628][ T61] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.922208][ T61] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 123.925679][ T61] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.929158][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.935299][ T8402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.940895][ T61] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.077105][ T8429] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 124.153679][ T61] usb 7-1: USB disconnect, device number 8 [ 124.632542][ T8447] netlink: 'syz.3.693': attribute type 10 has an invalid length. [ 124.639096][ T8447] batman_adv: batadv0: Adding interface: team0 [ 124.641178][ T8447] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.650522][ T8447] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 124.673427][ T8447] netlink: 'syz.3.693': attribute type 10 has an invalid length. [ 124.676031][ T8447] team0: entered promiscuous mode [ 124.678130][ T8447] team_slave_0: entered promiscuous mode [ 124.679990][ T8447] team_slave_1: entered promiscuous mode [ 124.683176][ T8447] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.686171][ T8447] batman_adv: batadv0: Interface activated: team0 [ 124.689209][ T8447] batman_adv: batadv0: Interface deactivated: team0 [ 124.691952][ T8447] batman_adv: batadv0: Removing interface: team0 [ 124.695626][ T8447] bridge0: port 3(team0) entered blocking state [ 124.699064][ T8447] bridge0: port 3(team0) entered disabled state [ 124.701822][ T8447] team0: entered allmulticast mode [ 124.703954][ T8447] team_slave_0: entered allmulticast mode [ 124.706354][ T8447] team_slave_1: entered allmulticast mode [ 124.711229][ T8447] bridge0: port 3(team0) entered blocking state [ 124.713938][ T8447] bridge0: port 3(team0) entered forwarding state [ 124.978113][ T8456] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 124.978507][ T8462] netlink: 'syz.2.698': attribute type 5 has an invalid length. [ 125.021782][ T8467] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 125.125368][ T834] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 125.297657][ T834] usb 5-1: config 0 has no interfaces? [ 125.299327][ T834] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 125.301848][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.305970][ T834] usb 5-1: config 0 descriptor?? [ 125.441998][ T8483] random: crng reseeded on system resumption [ 125.524729][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.527578][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.613291][ T831] usb 5-1: USB disconnect, device number 11 [ 125.967603][ T8485] netlink: 'syz.2.708': attribute type 39 has an invalid length. [ 126.152451][ T8492] netlink: 'syz.2.710': attribute type 2 has an invalid length. [ 126.162180][ T8492] !: entered promiscuous mode [ 126.174103][ T8492] netlink: 'syz.2.710': attribute type 2 has an invalid length. [ 126.177125][ T8492] !: left promiscuous mode [ 126.232166][ T8489] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 126.287835][ T8508] ip6gretap1: entered promiscuous mode [ 126.290052][ T8508] ip6gretap1: entered allmulticast mode [ 126.345627][ T8522] fuse: Bad value for 'user_id' [ 126.347874][ T8522] fuse: Bad value for 'user_id' [ 126.696467][ T8558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8558 comm=syz.1.729 [ 126.858052][ T6140] net_ratelimit: 35 callbacks suppressed [ 126.858066][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 126.893346][ T8561] uprobe: syz.2.731:8561 failed to unregister, leaking uprobe [ 126.974017][ T8566] __nla_validate_parse: 5 callbacks suppressed [ 126.974031][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 126.997070][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 127.019335][ T5944] Bluetooth: hci0: command 0x0c20 tx timeout [ 127.114740][ T6140] bond1: (slave lo): failed to get link speed/duplex [ 127.210920][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 127.217224][ T8584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8584 comm=syz.0.737 [ 127.217860][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 127.217869][ T40] audit: type=1400 audit(123.907:577): avc: denied { shutdown } for pid=8576 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.234095][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 127.350088][ T1235] bond1: (slave lo): failed to get link speed/duplex [ 127.378774][ T40] audit: type=1400 audit(124.056:578): avc: denied { setopt } for pid=8593 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.467775][ T6144] bond1: (slave lo): failed to get link speed/duplex [ 127.559716][ T8603] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.560696][ T8601] overlay: ./file0 is not a directory [ 127.564670][ T8605] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.596012][ T689] bond1: (slave lo): failed to get link speed/duplex [ 127.640537][ T8608] netlink: 64 bytes leftover after parsing attributes in process `syz.2.746'. [ 127.652580][ T8614] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.747'. [ 127.668354][ T8616] afs: Unknown parameter 'appraise' [ 127.706283][ T5944] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 127.735515][ T831] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.820672][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 127.822021][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 127.884720][ T831] usb 5-1: device descriptor read/64, error -71 [ 127.948975][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 127.970056][ T40] audit: type=1400 audit(124.608:579): avc: denied { create } for pid=8627 comm="syz.1.752" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.970301][ T8628] o2cb: This node has not been configured. [ 127.976376][ T40] audit: type=1400 audit(124.608:580): avc: denied { associate } for pid=8627 comm="syz.1.752" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.978235][ T8628] o2cb: Cluster check failed. Fix errors before retrying. [ 127.978261][ T8628] (syz.1.752,8628,1):user_dlm_register:674 ERROR: status = -22 [ 127.978277][ T8628] (syz.1.752,8628,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 128.043051][ T8632] input: syz0 as /devices/virtual/input/input11 [ 128.077842][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 128.141405][ T831] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 128.292780][ T831] usb 5-1: device descriptor read/64, error -71 [ 128.409157][ T831] usb usb5-port1: attempt power cycle [ 128.772456][ T831] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 128.794634][ T831] usb 5-1: device descriptor read/8, error -71 [ 128.822767][ T8642] netlink: 'syz.1.757': attribute type 10 has an invalid length. [ 128.825300][ T8642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.757'. [ 128.833585][ T8642] team0: Port device geneve0 added [ 128.863430][ T40] audit: type=1400 audit(125.450:581): avc: denied { set_context_mgr } for pid=8645 comm="syz.2.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.871791][ T8649] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 128.922746][ T5944] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 129.017159][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 129.039317][ T8658] tipc: Started in network mode [ 129.042047][ T8658] tipc: Node identity d28b18742187, cluster identity 4711 [ 129.045288][ T8658] tipc: Enabled bearer , priority 0 [ 129.051695][ T8657] tipc: Resetting bearer [ 129.061376][ T831] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 129.069853][ T8662] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 129.074391][ T8662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.765'. [ 129.077259][ T8662] NCSI netlink: No device for ifindex 0 [ 129.090419][ T831] usb 5-1: device descriptor read/8, error -71 [ 129.200484][ T831] usb usb5-port1: unable to enumerate USB device [ 129.245047][ T5944] Bluetooth: hci0: command 0x0c20 tx timeout [ 129.328774][ T40] audit: type=1400 audit(125.880:582): avc: denied { getopt } for pid=8663 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.384277][ T8665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.766'. [ 129.937565][ T8667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=8667 comm=syz.3.767 [ 129.942015][ T8667] i2c i2c-1: Invalid block write size 34 [ 130.002836][ T8668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8668 comm=syz.3.767 [ 130.105954][ T8657] tipc: Disabling bearer [ 130.129124][ T8667] bond1: left promiscuous mode [ 130.131217][ T8667] lo: left promiscuous mode [ 130.175584][ T40] audit: type=1400 audit(126.684:583): avc: denied { getopt } for pid=8671 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.184757][ T8672] ip6t_srh: unknown srh match flags 4000 [ 130.236068][ T40] audit: type=1400 audit(126.731:584): avc: denied { ioctl } for pid=8684 comm="syz.2.771" path="socket:[25078]" dev="sockfs" ino=25078 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.322080][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.327813][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.333493][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.338464][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.342570][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.347205][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.351610][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.355354][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.359227][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.363059][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.777252][ T40] audit: type=1400 audit(127.235:585): avc: denied { write } for pid=8709 comm="syz.1.779" name="usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.247122][ T8718] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.781'. [ 131.281923][ T8720] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 131.285327][ T8720] netlink: 228 bytes leftover after parsing attributes in process `syz.2.782'. [ 131.310105][ T8720] overlayfs: statfs failed on './file0' [ 131.506840][ T40] audit: type=1400 audit(127.918:586): avc: denied { mounton } for pid=8725 comm="syz.3.785" path="/proc/521/task" dev="proc" ino=24457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 131.509179][ T8726] unsupported nlmsg_type 40 [ 131.549759][ T8726] netlink: 'syz.3.785': attribute type 6 has an invalid length. [ 131.663011][ T8734] binder: 8733:8734 ioctl 800448f0 200000000100 returned -22 [ 131.713993][ T834] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 131.884787][ T834] usb 7-1: Using ep0 maxpacket: 8 [ 131.891002][ T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.893797][ T834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.896967][ T834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.899794][ T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.903587][ T834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.907202][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.131309][ T834] usb 7-1: GET_CAPABILITIES returned 0 [ 132.133027][ T834] usbtmc 7-1:16.0: can't read capabilities [ 132.216330][ T689] net_ratelimit: 27 callbacks suppressed [ 132.216349][ T689] bond1: (slave lo): failed to get link speed/duplex [ 132.310284][ T8775] binder: BINDER_SET_CONTEXT_MGR already set [ 132.314456][ T8775] binder: 8774:8775 ioctl 40046207 0 returned -16 [ 132.334931][ T6147] bond1: (slave lo): failed to get link speed/duplex [ 132.360031][ T8779] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 132.375645][ T8779] __nla_validate_parse: 2 callbacks suppressed [ 132.375655][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 132.381163][ T8779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.403960][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.408364][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.411323][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.414231][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.417163][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.420045][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.427441][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.430416][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.433356][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.436241][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.439239][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.442885][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.445791][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.448664][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.451554][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.454425][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.499692][ T8783] gre1: entered promiscuous mode [ 132.502809][ T8783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.505588][ T8783] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 132.508943][ T8783] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 132.513732][ T8783] bond3: (slave gre1): making interface the new active one [ 132.516996][ T8783] bond3: (slave gre1): Enslaving as an active interface with an up link [ 132.526749][ T6144] bond1: (slave lo): failed to get link speed/duplex [ 132.539858][ T6144] ------------[ cut here ]------------ [ 132.542055][ T6144] kernel BUG at net/core/skbuff.c:2273! [ 132.547791][ T6144] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 132.550675][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: kworker/u32:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.554048][ T6144] Tainted: [L]=SOFTLOCKUP [ 132.555397][ T6144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.558681][ T6144] Workqueue: bond3 bond_resend_igmp_join_requests_delayed [ 132.560849][ T6144] RIP: 0010:pskb_expand_head+0x62d/0xf80 [ 132.562603][ T6144] Code: b6 04 02 84 c0 74 08 3c 03 0f 8e af 08 00 00 8b 44 24 28 8b 74 24 2c 29 f0 01 83 e0 00 00 00 e9 72 ff ff ff e8 04 54 7e f8 90 <0f> 0b e8 fc 53 7e f8 90 0f 0b e8 f4 53 7e f8 41 81 cd 00 00 02 00 [ 132.568379][ T6144] RSP: 0018:ffffc900043475d8 EFLAGS: 00010293 [ 132.570268][ T6144] RAX: 0000000000000000 RBX: ffff888055912280 RCX: ffffffff8940a625 [ 132.572608][ T6144] RDX: ffff8880352e0000 RSI: ffffffff8940ab8c RDI: 0000000000000005 [ 132.574997][ T6144] RBP: ffff88805591234c R08: 0000000000000005 R09: 0000000000000000 [ 132.577523][ T6144] R10: 0000000095c02e70 R11: ffff8880352e0b30 R12: 0000000095c02e70 [ 132.579965][ T6144] R13: 0000000000000820 R14: 0000000095c03530 R15: dffffc0000000000 [ 132.582424][ T6144] FS: 0000000000000000(0000) GS:ffff8880d68f1000(0000) knlGS:0000000000000000 [ 132.585206][ T6144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.587240][ T6144] CR2: 00007f34281b0d58 CR3: 00000000251f2000 CR4: 0000000000352ef0 [ 132.589709][ T6144] Call Trace: [ 132.590747][ T6144] [ 132.591676][ T6144] ? __pfx_pskb_expand_head+0x10/0x10 [ 132.593467][ T6144] ipgre_header+0xdc/0x610 [ 132.594909][ T6144] ? __pfx_ipgre_header+0x10/0x10 [ 132.596530][ T6144] neigh_connected_output+0x366/0x620 [ 132.598294][ T6144] ip6_finish_output2+0xad1/0x1cf0 [ 132.600218][ T6144] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 132.602413][ T6144] __ip6_finish_output+0x3cd/0x1010 [ 132.604108][ T6144] ip6_output+0x253/0x710 [ 132.605528][ T6144] dst_output+0xa8/0x4b0 [ 132.606882][ T6144] mld_sendpack+0xa30/0xed0 [ 132.608355][ T6144] ? __pfx_mld_sendpack+0x10/0x10 [ 132.610067][ T6144] mld_send_report+0xd7/0x3c0 [ 132.611599][ T6144] ipv6_mc_netdev_event+0x2b8/0x3a0 [ 132.613273][ T6144] notifier_call_chain+0xbc/0x3e0 [ 132.614885][ T6144] ? __pfx_ipv6_mc_netdev_event+0x10/0x10 [ 132.616686][ T6144] call_netdevice_notifiers_info+0xbe/0x110 [ 132.618605][ T6144] call_netdevice_notifiers+0x7c/0xb0 [ 132.620313][ T6144] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 132.622250][ T6144] bond_resend_igmp_join_requests_delayed+0x5e/0x170 [ 132.624347][ T6144] process_one_work+0x9ba/0x1b20 [ 132.625973][ T6144] ? __pfx_process_one_work+0x10/0x10 [ 132.627798][ T6144] ? assign_work+0x1a0/0x250 [ 132.629282][ T6144] worker_thread+0x6c8/0xf10 [ 132.630750][ T6144] ? __pfx_worker_thread+0x10/0x10 [ 132.632370][ T6144] kthread+0x3c5/0x780 [ 132.633699][ T6144] ? __pfx_kthread+0x10/0x10 [ 132.635124][ T6144] ? rcu_is_watching+0x12/0xc0 [ 132.636594][ T6144] ? __pfx_kthread+0x10/0x10 [ 132.638100][ T6144] ret_from_fork+0x983/0xb10 [ 132.639550][ T6144] ? __pfx_ret_from_fork+0x10/0x10 [ 132.641183][ T6144] ? __switch_to+0x7af/0x10d0 [ 132.642635][ T6144] ? __pfx_kthread+0x10/0x10 [ 132.644102][ T6144] ret_from_fork_asm+0x1a/0x30 [ 132.645571][ T6144] [ 132.646529][ T6144] Modules linked in: [ 132.648084][ T6144] ---[ end trace 0000000000000000 ]--- [ 132.649980][ T6144] RIP: 0010:pskb_expand_head+0x62d/0xf80 [ 132.651727][ T6144] Code: b6 04 02 84 c0 74 08 3c 03 0f 8e af 08 00 00 8b 44 24 28 8b 74 24 2c 29 f0 01 83 e0 00 00 00 e9 72 ff ff ff e8 04 54 7e f8 90 <0f> 0b e8 fc 53 7e f8 90 0f 0b e8 f4 53 7e f8 41 81 cd 00 00 02 00 [ 132.657874][ T6144] RSP: 0018:ffffc900043475d8 EFLAGS: 00010293 [ 132.659821][ T6144] RAX: 0000000000000000 RBX: ffff888055912280 RCX: ffffffff8940a625 [ 132.662298][ T6144] RDX: ffff8880352e0000 RSI: ffffffff8940ab8c RDI: 0000000000000005 [ 132.664830][ T6144] RBP: ffff88805591234c R08: 0000000000000005 R09: 0000000000000000 [ 132.667721][ T6144] R10: 0000000095c02e70 R11: ffff8880352e0b30 R12: 0000000095c02e70 [ 132.670183][ T6144] R13: 0000000000000820 R14: 0000000095c03530 R15: dffffc0000000000 [ 132.672568][ T6144] FS: 0000000000000000(0000) GS:ffff8880d68f1000(0000) knlGS:0000000000000000 [ 132.675384][ T6144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.677551][ T6144] CR2: 00007f34281b0d58 CR3: 000000000e184000 CR4: 0000000000352ef0 [ 132.680046][ T6144] Kernel panic - not syncing: Fatal exception [ 132.682636][ T6144] Kernel Offset: disabled [ 132.684021][ T6144] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:35:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=1ffff11006dd8cf2 RDX=ffff88802466a4c0 RSI=ffffffff824fc741 RDI=ffffc900045e7c60 RBP=ffffffff8e5fed00 RSP=ffffc900045e7c38 R8 =0000000000000005 R9 =0000000000000000 R10=000000000000000a R11=ffff88802466aff0 R12=1ffff920008bcf88 R13=ffffffff8e277380 R14=ffff88803ecaace0 R15=0000000000000000 RIP=ffffffff81befff6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbc2a2a7880 ffffffff 00c00000 GS =0000 ffff8880d68f1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f34281b0d58 CR3=00000000251f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000009 Opmask02=00000000ffffffff Opmask03=0000000000400004 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe90dc23b8 00007ffe90dc23b8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe90dc2590 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005625905e8780 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc29bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc29bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732556e345f483 7373255381397b59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ad470e92ca93cb52 73737376112a7000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f716d2f30706f 6f6c2f6b636f6c62 2f6c617574726976 2f73656369766564 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 000056259012d2c0 00000000000001c1 000000302f716d2f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562590370cc8 000056259036c020 0000000000000041 0000000000302e36 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004011 0000000000000070 0000000000000000 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=000000000000002e RCX=ffffffff816ea6cb RDX=0000000000000000 RSI=000000000000002e RDI=000000000000003f RBP=000000002a334320 RSP=ffffc90003eb79b8 R8 =0000000000000006 R9 =ffff8880aa334320 R10=000000002a334320 R11=ffff888028188b30 R12=0000000000000000 R13=ffffc90003eb7a60 R14=0000000000000001 R15=ffff8880257bfc80 RIP=ffffffff81bef9d8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555679b4500 ffffffff 00c00000 GS =0000 ffff8880d69f1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f21f55b5d58 CR3=000000003a552000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000008 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd1fb73f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21f5415050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21f541505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21f5415057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21f541506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21f54150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21f54151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000042800000005 00000270000001a0 ffffffff000000d0 0000000000000270 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6568745f69706361 2474616e65706f00 656c62616e655f6e 6170776f6c362474 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e65706f006c6f 72746e6f635f6e61 70776f6c36247461 6e65706f0074616e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000009c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=fffff52001b63f55 RBX=dffffc0000000000 RCX=0000000000000000 RDX=ffffc9000db1fc70 RSI=ffffc9000db1fbc0 RDI=ffffffff8e2d6ca0 RBP=ffffffff8e2d6ca0 RSP=ffffc9000db1fa38 R8 =0000000000000006 R9 =0000000000000ff1 R10=0000000000000ff1 R11=0000000000000002 R12=1ffff92001b63f55 R13=0000000000000000 R14=ffffffff8e2d6ca0 R15=ffffc9000db1fbc0 RIP=ffffffff819dd7c0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6b378edc80 ffffffff 00c00000 GS =0000 ffff8880d6af1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f21f61b6f98 CR3=000000002ddce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556492cf60 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555564939d64 00005555649398b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2906bbad20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556492f6cd 000055556492f350 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556492c728 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800068b90030fff ffffffffff04068b 8003180800061000 2010000600719c0c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ce88a463f9807df a033dfa72449f5d3 ff8065f673703c7a 54ca8f5206cd415b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c3b640df9fcbff1 50712d1cfedae666 2cde2244d1500f20 65bb0d2059acad26 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be7ce3c34596837c c08345a8d58df12e 8f2f7ac355936022 cff8d223a4270797 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c4978163c5774a7 308617baa1a745dc bf5e345f9a242793 7b4c8b22a41f7dd8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102808010000380 0401000000080606 015cd200080003e0 0300100003d00300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100003c003021000 03b00302b810002c 9003000000563412 482b88ddc8492aae ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ade3d6ceb45bf8c2 a35cf629d5bd7fd5 ccdb32b2d5ded078 5564a9a5b78c4978 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 163c5774a7308617 baa1a745dcbf5e34 5f9a2427937b4c8b 22a41f7dd8be7ce3 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d25c4 RBX=0000000000000003 RCX=ffffffff8b78d6d9 RDX=ffffed100d4e673e RSI=ffffffff8bf2b200 RDI=ffffffff819358cd RBP=ffffed1003bd8000 RSP=ffffc90000197de8 R8 =0000000000000000 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=0000000000000003 R12=0000000000000003 R13=ffff88801dec0000 R14=ffffffff9088cbd0 R15=0000000000000000 RIP=ffffffff8b78bdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000005840 CR3=0000000055cbf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023746e6576652f 7475706e692f7665 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ba3615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ba361505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ba3615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ba361506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ba36150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ba36151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6ceee43849aea44 74470a84773ebf34 2d22ce8488090008 aa1414ac00020008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca574593005aa369 1069f7d552cd83cf d790efaa62410004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 671f79712cc313f7 1a5627b47e833c2a 0fefb8b438dce5ec f98a893a7f740154 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 adb2078e1e61442c 9e1110938cd38b6c 55415bbe568103f6 a8671f79712cc313 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f71a5627b47e833c 2a0fefb8b438dce5 ecf98a893a7f7401 54ca574593005aa3 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 691069f7d552cd83 cfd790efaa6241d4 bda3fc098e731b39 7be6ceee43849aea ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4474470a84773ebf 342d22ce84880900 08aa1414ac000200 0800180000000900 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000